search for: back_up_and_restoring_a_samba_ad_dc

On https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC#Online_DC_backup there is a comment ?you may want to specify a --configfile option so that the correct smb.conf settings get included in the backup.? Why does samba-tool not pick up the one it (or other parts of Samba) is compiled with automatically? Like `smbd -b | grep "CONFIGFILE" | s...

I'm currently reviewing my own backup strategy for Samba and I realize it is not in line with best practices provided in the Wiki. ( https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC) Said best practices, however, seem a bit like a nightmare to me. Assuming the AD is gone and you want to restore just one DC, and you want things to look just as they did before the crash, the process according to the Wiki looks as follows: 1. Install a Samba DC on a new (!) temporary host and p...

UNCLASSIFIED Hi Andrew and Roland, I originally installed samba-4.1.7 on CentOS 6.5. I successfully joined the domain. I intended to take over from the 2003 server but because the domain was being heavily used, I delayed seizing the roles. Now I really, really want to replace the 2003 server. The network is currently not in use and I want to complete the job while I have an opportunity. If I

...; Hopefully this will fix DC1, but your Samba is that old, I cannot > remember if that will run on your DC. > > Your main problem is that your DC is in production, that is why I said > to back everything up before you start. I've skimmed through: https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC and my understanding is both online and offline samba-tool backups are only available in the very latest versions 4.9 and 4.10. So the only option I have is a manual data backup. Is it sufficient to back up /var/lib/samba folder (containing *.ldb, sysvol and netlogon) and restore it entirely if a...

...b 2019 14:13:27 +0100 > Viktor Trojanovic via samba <samba at lists.samba.org> wrote: > > > I'm currently reviewing my own backup strategy for Samba and I > > realize it is not in line with best practices provided in the Wiki. ( > > https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC) > > Said best practices, however, seem a bit like a nightmare to me. > > > > Assuming the AD is gone and you want to restore just one DC, and you > > want things to look just as they did before the crash, the process > > according to the Wiki looks as follows: > &g...

...eed at least: /etc/samba /var/lib/samba /var/cache/samba /etc/krb* Check if sysvol is included in you backup and i also suggest an extra ACL backup of sysvol. !! Dont copy the /var/lib/samba when samba is running, you will get corrupted [l-t]db files !! Read: https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC But the script is a "set and forget" and does all of above. Im using it over a year now, so can you explain what the problem is with the backup script. And i agree, its a "hard" to read script, so why not .. Just dont read it, get it, set it and enjoy it. If it does not w...

...ry to backup a brand new DC. I'm guessing the same thing could happen though if all the RID allocations have taken place on the primary DC and you try to back up the secondary DC. Creating/deleting a temporary user on that DC should force a RID allocation. See: https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC#Troubleshooting Most likely you'll just hit the second sysvol problem though. > ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A > process has requested access to an object but has not been granted > those access rights.') >   File "/usr/lib/python...

...opportunity. If I have no other option, I will create a new domain, but I'd prefer to avoid having to create new user accounts. How about trying this: https://wiki.samba.org/index.php/Create_a_samba_lab-domain If that works, then you may be able to try this: https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC an online backup might work against windows, but I suspect you will hit: https://bugzilla.samba.org/show_bug.cgi?id=13917 If you can apply patches (difficult air-gapped I know), try the backported one attached to the bug. Restoring the backup won't allow the windows server to still operate...

...DC in realm > PRODUCTION > > Will samba_dnsupdate --verbose resolve this situation? > Is there a way for the DR host to seize the KDC? > What is the correct procedure to provision and clone a DR host from a > backup? The correct procedure is https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC Just copying the files isn't advised, to start with a lock needs to be taken over all the files to ensure a stable backup, which can only be taken with the correct tools, unless the server has been stopped. Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/...

...t; >> Will samba_dnsupdate --verbose resolve this situation? >> Is there a way for the DR host to seize the KDC? >> What is the correct procedure to provision and clone a DR host from a >> backup? > > The correct procedure is > https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC > > Just copying the files isn't advised, to start with a lock needs to be > taken over all the files to ensure a stable backup, which can only be > taken with the correct tools, unless the server has been stopped. Perfect! (FWIW, the Production Server was indeed stopped before th...

On Sun, 10 Feb 2019 14:13:27 +0100 Viktor Trojanovic via samba <samba at lists.samba.org> wrote: > I'm currently reviewing my own backup strategy for Samba and I > realize it is not in line with best practices provided in the Wiki. ( > https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC) > Said best practices, however, seem a bit like a nightmare to me. > > Assuming the AD is gone and you want to restore just one DC, and you > want things to look just as they did before the crash, the process > according to the Wiki looks as follows: > > 1. Install a Samba D...

...Gesendet: Sunday, 21 July 2019 23:52 An: Joachim Lindenberg <samba at lindenberg.one>; samba at lists.samba.org Betreff: Re: [Samba] samba-tool domain backup online && --configfile On 20/07/19 8:42 PM, Joachim Lindenberg via samba wrote: > On > https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC#Online_DC_backup there is a comment ?you may want to specify a --configfile option so that the correct smb.conf settings get included in the backup.? Why does samba-tool not pick up the one it (or other parts of Samba) is compiled with automatically? Like `smbd -b | grep "CONFIGFILE" | se...

...DC1, but your Samba is that old, I cannot >> remember if that will run on your DC. >> >> Your main problem is that your DC is in production, that is why I >> said to back everything up before you start. > I've skimmed through: > https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC > and my understanding is both online and offline samba-tool backups are > only available in the very latest versions 4.9 and 4.10. > So the only option I have is a manual data backup. > Is it sufficient to back up /var/lib/samba folder (containing *.ldb, > sysvol and netlogon) and...

...case, the backup file from only one of the DCs would ever be used to restore the domain. It's still fine to backup every DC, but the only real point of doing so is extra insurance in case the first backup file doesn't recover the domain properly. See also: https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC Cheers, Tim On 18/07/19 12:32 AM, Joachim Lindenberg via samba wrote: > Afaik one is not supposed to ever restore a DC in case you are running multiple. Thus I am wondering why you want to do (online or not) backups at all. > Or did that rule change? > Regards, Joachim > > -----Urs...

...stnames and IP's. I assume I have the following two options * Create new DC's and join with new hostnames and IP's. (adjust workstation DNS settings) o Demote and decommission existing DC's. * Backup existing DC's by following https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC o Create new DC's with same hostnames and IP's and OS's. Restore DC from backup and subsequently upgrade OS. Am I omitting any other options? Thanks. -- -- James

Hi, Using old samba_backup with 4.4.x a paramter can be defined to keep some copies of backup and purge automatically. I'm searching same option with new samba backup offline or online, but I can't find, where is it? Thanks

...ow about trying this: > > https://wiki.samba.org/index.php/Create_a_samba_lab-domain Isn't the OP going to run into a chicken & egg situation here, will it work against a Windows DC ? > > If that works, then you may be able to try this: > > https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC > > an online backup might work against windows, but I suspect you will > hit: > > https://bugzilla.samba.org/show_bug.cgi?id=13917 > > If you can apply patches (difficult air-gapped I know), try the > backported one attached to the bug. > > Restoring the backup won...

...100 >> Viktor Trojanovic via samba <samba at lists.samba.org> wrote: >> >>> I'm currently reviewing my own backup strategy for Samba and I >>> realize it is not in line with best practices provided in the Wiki. ( >>> https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC) >>> Said best practices, however, seem a bit like a nightmare to me. >>> >>> Assuming the AD is gone and you want to restore just one DC, and you >>> want things to look just as they did before the crash, the process >>> according to the Wiki looks as...

...rojanovic via samba <samba at lists.samba.org> wrote: > > > > > I'm currently reviewing my own backup strategy for Samba and I > > > realize it is not in line with best practices provided in the > > > Wiki. > > > ( https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC) > > > Said best practices, however, seem a bit like a nightmare to me. > > > > > > Assuming the AD is gone and you want to restore just one DC, and > > > you want things to look just as they did before the crash, the > > > process according to the Wiki...

...everything is fine between them when I showrepl. From the working-DCs, > they show the two broken-DCs up. > > > > > Before you try anything further I would suggest you make a good backup of your current DC not exhibiting any replication issues. https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC Have you tried correcting the force replication with a known good DC? You can try to further troubleshoot the issues and attempt to resolve, but the easiest thing IMO would be to join new DC's to the domain. Remove the other two DC's from the domain and never join them again. -- -- J...