Perttu Aaltonen
2023-Mar-25 22:02 UTC
[Samba] Need to upgrade very old samba: 4.6 AD to current release
I did something very similar recently. Joined a new 4.17.6 Debian Bullseye DC to an old 4.1.9 domain running on Wheezy and transferred roles, then demoted the original old DC. I did it in a sandbox environment but everything seemed to go smoothly. I?ve yet to do it in a live environment but since it?s a VM I?m quite confident there are no hiccups. YMMV as my environment doesn't use GPOs for example and only use AD for authentication. Just test throroughly your use cases. -Perttu> On 25. Mar 2023, at 23.35, xyz via samba <samba at lists.samba.org> wrote: > > Thank you Rowland I will verify proposed path h in a lab environment. > > The most important thing for me is that I have confirmation that it is > better to add new controllers and transfer roles than to restore copies and > update backups > Cheers! > > sob., 25 mar 2023 o 12:30 Rowland Penny via samba <samba at lists.samba.org> > napisa?(a): > >> >> >> On 24/03/2023 19:54, xyz via samba wrote: >>> Hello >>> I need to upgrade Samba v.4.6 with AD enabled, which is built from >> sources >>> and installed on Ubuntu 12.04. >> >> Ouch, they are both very old. >> >>> >>> Trying .configure script in v.4.9 it complains: Samba AD DC and >>> --enable-selftest requires lmdb 0.9.16 or later >> >> Do really need selftest ? >> >>> >>> In this state of the outdated system upgrade will fail due to missed >>> dependencies. >>> >>> I planned to upgrade OS before parallel to samba upgrade, but sadly repos >>> of Ubuntu 12.04 and 14.04 has been removed. >>> >>> Maybe I should install ubuntu 16.04 on the test machine, >> >> I would go for 18.04, it is still just in support and this will get you >> Samba 4.7.6 (if I remember correctly). Set up a new computer and join >> this to the domain as a DC, then transfer the FSMO roles to it. >> >> After that, I would abandon Ubuntu, install Debian buster and join this >> as a DC (this will get you to 4.9.5), then either join bullseye using >> backports, or upgrade in place to bullseye using backports, this will >> get you to 4.17.6 >> You may be able to directly join a debian bullseye machine to your 18.04 >> DC, but probably better safe than sorry. >> >>> restore the backup of the samba installation on it >> >> If your backup was taken using the old Samba backup method, then I >> wouldn't rely on it, there was no restore method for a start. >> >> What ever way you go, I would test it in sandbox first. >> >> Rowland >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
Andrew Bartlett
2023-Mar-26 02:08 UTC
[Samba] Need to upgrade very old samba: 4.6 AD to current release
Our intention is that this is all you need to do, join the new DC and transfer roles, even over the big version gap. ? I'm glad to hear it worked for you with 4.17.6 as this includes a fix for?https://bugzilla.samba.org/show_bug.cgi?id=15189?specifically aimed at providing a workaround for this kind of upgrade. Andrew Bartlett On Sun, 2023-03-26 at 00:02 +0200, Perttu Aaltonen via samba wrote:> I did something very similar recently. Joined a new 4.17.6 Debian Bullseye DC to an old 4.1.9 domain running on Wheezy and transferred roles, then demoted the original old DC. I did it in a sandbox environment but everything seemed to go smoothly. I?ve yet to do it in a live environment but since it?s a VM I?m quite confident there are no hiccups. > > YMMV as my environment doesn't use GPOs for example and only use AD for authentication. Just test throroughly your use cases. > > -Perttu > > > On 25. Mar 2023, at 23.35, xyz via samba <samba at lists.samba.org> wrote: > > > > Thank you Rowland I will verify proposed path h in a lab environment. > > > > The most important thing for me is that I have confirmation that it is > > better to add new controllers and transfer roles than to restore copies and > > update backups > > Cheers! > > > > sob., 25 mar 2023 o 12:30 Rowland Penny via samba <samba at lists.samba.org> > > napisa?(a): > > > > > > > > > > > On 24/03/2023 19:54, xyz via samba wrote: > > > > Hello > > > > I need to upgrade Samba v.4.6 with AD enabled, which is built from > > > sources > > > > and installed on Ubuntu 12.04. > > > > > > Ouch, they are both very old. > > > > > > > > > > > Trying .configure script in v.4.9 it complains: Samba AD DC and > > > > --enable-selftest requires lmdb 0.9.16 or later > > > > > > Do really need selftest ? > > > > > > > > > > > In this state of the outdated system upgrade will fail due to missed > > > > dependencies. > > > > > > > > I planned to upgrade OS before parallel to samba upgrade, but sadly repos > > > > of Ubuntu 12.04 and 14.04 has been removed. > > > > > > > > Maybe I should install ubuntu 16.04 on the test machine, > > > > > > I would go for 18.04, it is still just in support and this will get you > > > Samba 4.7.6 (if I remember correctly). Set up a new computer and join > > > this to the domain as a DC, then transfer the FSMO roles to it. > > > > > > After that, I would abandon Ubuntu, install Debian buster and join this > > > as a DC (this will get you to 4.9.5), then either join bullseye using > > > backports, or upgrade in place to bullseye using backports, this will > > > get you to 4.17.6 > > > You may be able to directly join a debian bullseye machine to your 18.04 > > > DC, but probably better safe than sorry. > > > > > > > restore the backup of the samba installation on it > > > > > > If your backup was taken using the old Samba backup method, then I > > > wouldn't rely on it, there was no restore method for a start. > > > > > > What ever way you go, I would test it in sandbox first. > > > > > > Rowland > > > > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: https://lists.samba.org/mailman/options/samba > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > >-- Andrew Bartlett (he/him) https://samba.org/~abartlet/ Samba Team Member (since 2001) https://samba.org Samba Developer, Catalyst IT https://catalyst.net.nz/services/samba