[Samba] Samba ADDC server migration

ladas at seznam.cz
2025-05-15T10:52:30Z

Hi Rowland.
slave in my description mens backup addc, both of them. I use one addc as a
master and second two servers are connected to this master addc. So any changes
or GPO settings I make at master and they are propagate to slaves.
smb.conf at master addc:
# Global parameters
[global]
        dns forwarder = 10.1.1.225
        netbios name = ADDC1
        realm = DOMAIN.COMM
        server role = active directory domain controller
        workgroup = DOMAIN
        idmap_ldb:use rfc2307 = yes
        log level = 1 winbind:5 auth_audit:5
[netlogon]
        path = /var/lib/samba/sysvol/domain.comm/scripts
        read only = No
        acl_xattr:ignore system acls = yes
[sysvol]
        path = /var/lib/samba/sysvol
        read only = No
smb.conf at backup addc:
# Global parameters
[global]
        netbios name = ADDC2
        realm = DOMAIN.COMM
        server role = active directory domain controller
        workgroup = DOMAIN
        dns forwarder = 10.1.1.225
        idmap_ldb:use rfc2307 = yes
        template shell = /bin/bash
        winbind use default domain = true
        winbind offline logon = false
        winbind nss info = rfc2307
        winbind enum users = yes
        winbind enum groups = yes
[netlogon]
        path = /var/lib/samba/sysvol/domain.comm/scripts
        read only = No
        acl_xattr:ignore system acls = yes
[sysvol]
        path = /var/lib/samba/sysvol
        read only = No
For sysvol synchronization I use rsync in cron:
*/5 * * * * rsync -XAavz --delete-after  --progress --stats
/var/lib/samba/sysvol/ root at addc2:/var/lib/samba/sysvol/ >
/var/log/sysvol-replication-addc2.log 2>&1
--
Greetings, ladas


Dne ?tvrtek 15. kv?tna 2025 11:30:26 CEST, Rowland Penny via samba
napsal(a):
> On Thu, 15 May 2025 10:31:46 +0200
> ladas via samba <samba at lists.samba.org> wrote:
>
> > Hi everybody.
> >
> > I would like to ask for your advice. I use old samba addc server and
> > two slave nodes synced by rsync ( one as a backup, second one at
> > small company branch )
>
> Before we get deeply involved here, can you please explain just what
> you mean by 'slave node' and what you using rsync to sync.
>
> Rowland
>
>