samba - Jan 2023 - Transferring fsmo roles to new DC2

On 16/01/2023 10:52, Callum G. MacEwan via samba wrote:
> 
>> Yes, probably, but why are they not there ?
>> I think you need to give us a bit more info:
>> What OS
> Debian
>>
>> What version of Samba
> Samba 4.17.4
>> Are you using Bind9
> No using internal bind
I take it that means the internal dns server and not a separate dns server.
>> How was the domain provisioned
> samba-tool as per wiki
>>
>>
>> If you run this on the DC:
>>
>> ldbsearch --cross-ncs -H /var/lib/samba/private/sam.ldb -b 
>> DC=DomainDnsZones,DC=balewan,DC=pegasusnz,DC=com
'(cn=Infrastructure)'
> 
> root at DC2:/etc/sudoers.d#? ldbsearch --cross-ncs -H 
> /var/lib/samba/private/sam.ldb -b 
> DC=DomainDnsZones,DC=balewan,DC=pegasusnz,DC=com
'(cn=Infrastructure)'
> 
> # record 1
> 
> dn: CN=Infrastructure,DC=DomainDnsZones,DC=balewan,DC=pegasusnz,DC=com
> 
> objectClass: top
> 
> objectClass: infrastructureUpdate
> 
> cn: Infrastructure
> 
> instanceType: 4
> 
> whenCreated: 20221203031619.0Z
> 
> whenChanged: 20221203031619.0Z
> 
> uSNCreated: 5428
> 
> uSNChanged: 5428
> 
> showInAdvancedViewOnly: TRUE
> 
> name: Infrastructure
> 
> objectGUID: e27698d8-a43b-4b74-8e51-91cf1b6cdaf3
> 
> fSMORoleOwner: CN=NTDS 
>
Settings,CN=CAPSICUM,CN=Servers,CN=Balewan-Orchards,CN=Sites,CN=Configuration,DC=balewan,DC=pegasusnz,DC=com
Hmm, so it isn't in the 'Default-First-Site-Name' site, I wonder if
this
is the problem ? Let me go and have a read of the code and get back to you.

Rowland

>>> Are you using Bind9
>> No using internal bind
>
> I take it that means the internal dns server and not a separate dns 
> server.
Yes you are correct sorry . Samba's internal DNS
>
> Hmm, so it isn't in the 'Default-First-Site-Name' site, I
wonder if
> this is the problem ? Let me go and have a read of the code and get 
> back to you.
>
Thank you

16.01.2023 13:59, Rowland Penny via samba ?????:
..
>> fSMORoleOwner: CN=NTDS
Settings,CN=CAPSICUM,CN=Servers,CN=Balewan-Orchards,CN=Sites,CN=Configuration,DC=balewan,DC=pegasusnz,DC=com
> 
> Hmm, so it isn't in the 'Default-First-Site-Name' site, I
wonder if this is the problem ? Let me go and have a read of the code and get
back to you.
Since we have several sites, this was the same in my case too, it was
Moscow-Office site, and I removed
Default-First-Site-Name since it wasn't used.

/mjt