similar to: Error while transferring fsmo-roles

I am attempting to transfer the all FSMO roles from an old DC to our new DC. Both DCs are running Samba 4.7.3. I have transferred the Schma, Infrastructure, RID, PDC and Naming roles without issue. unfortunately, the forestdns and domaindns roles are giving me grief. Here is the output of the commands root at dc1:~# samba-tool fsmo transfer --role=forestdns ldb_wrap open of secrets.ldb

Attempting to move FSMO roles from one SerNET Samba 4.5.4 DC to another, all roles transfered except the DNS related ones - those fail with an LDAP_INSUFFICIENT_ACCESS_RIGHTS [root at larkin28 ~]# samba-tool fsmo show SchemaMasterRole owner: CN=NTDS Settings,CN=LARKIN28,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=micore,DC=us InfrastructureMasterRole owner: CN=NTDS

Hi, I faced the same problem, solved it by adding the line import samba.drs_utils to the file fsmo.py. When building samba yourself, from withtin the base directory you can apply this patch file to do it for you: --- python/samba/netcmd/fsmo.py.old 2016-12-05 08:18:44.000000000 +0000 +++ python/samba/netcmd/fsmo.py 2017-03-11 10:27:31.453884091 +0000 @@ -20,6 +20,7 @@ import samba

Hai, can you post the exact error again, or is is really exact like the January link. drs_utils.py on debian should be these. /usr/lib/python2.7/dist-packages/samba/drs_utils.py /usr/lib/python2.7/dist-packages/samba/drs_utils.pyc And now i see whats the differrence here. Rowland showd in january. /usr/local/samba/lib/python2.7/site-packages/samba/drs_utils.py /usr/lib/

Hi, Hi, I'm having trouble transferring FSMO roles "DOMAINDNS" and FORESTDNS with below showing: samba-tool fsmo transfer --role=domaindns ERROR: Failed to delete role 'domaindns': LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - <00002098: SecErr: DSID-031523E0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 > <> root at samba4-dc:~# samba-tool fsmo transfer

Hello all, Have joined a new DC to an existing active directory consisting of a sole DC.  So, we now have two domain controllers, the original being ad.DOMAIN.intranet (192.168.0.17), and the new one being DOMAIN-ad.DOMAIN.intranet (192.168.0.11).  I want the new DC to become the FSMO role owner, so I followed the instructions here -

Recently tried transferring roles from Samba 4.3.11 to Samba 4.7.0. Ultimately, both dcs agreed that the 4.7.0 dc (dc3) had all the roles and replication and the databases were in good shape. However, during the process, I got a lot of errors that seemed to magically disappear. Should I be worried? root at dc3:~# samba-tool fsmo show SchemaMasterRole owner: CN=NTDS

Hi for All! I am using a Windows Server 2008R2 as primary DC and a Ubuntu Server 16.04 as secundary DC with Samba 4.3.9 (from repository/apt-get). During a migration test of FSMO roles I received an error from Samba: root at gteste2:~# samba-tool fsmo transfer --role=all ERROR: Failed to delete role 'domaindns': LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - <00002098: SecErr:

On Tue, 12 Dec 2017 11:56:08 -0600 Taylor Hammerling via samba <samba at lists.samba.org> wrote: > I am attempting to transfer the all FSMO roles from an old DC to our > new DC. Both DCs are running Samba 4.7.3. I have transferred the > Schma, Infrastructure, RID, PDC and Naming roles without issue. > > unfortunately, the forestdns and domaindns roles are giving me grief.

Fail! :-( root at gteste2:~# samba-tool fsmo transfer --role=all -UAdministrador FSMO transfer of 'rid' role successful FSMO transfer of 'pdc' role successful FSMO transfer of 'naming' role successful FSMO transfer of 'infrastructure' role successful FSMO transfer of 'schema' role successful ERROR(<type 'exceptions.UnboundLocalError'>):

Hi, This way don't works too. root at samba4-dc:~# samba-tool fsmo transfer --role=forestdns -Uadministrator Password for [EMPRESA\administrator]: ERROR: Failed to add role 'forestdns': LDAP error 53 LDAP_UNWILLING_TO_PERFORM - <000020AE: SvcErr: DSID-03152BF7, problem 5003 (WILL_NOT_PERFORM), data 0 > <> root at samba4-dc:~# samba-tool fsmo transfer --role=domaindns

Quoting Adam Tauno Williams via samba <samba at lists.samba.org>: > Attempting to move FSMO roles from one SerNET Samba 4.5.4 DC to > another, all roles transfered except the DNS related ones - those > fail with an LDAP_INSUFFICIENT_ACCESS_RIGHTS > [root at larkin28 ~]# samba-tool fsmo transfer --role=forestdns > ERROR: Failed to delete role 'forestdns': LDAP error

sorry, samba version 4.5.0 Am Freitag, 30. September 2016 10:31 CEST, Rowland Penny via samba <samba at lists.samba.org> schrieb: > On Fri, 30 Sep 2016 10:20:27 +0200 > Heinz Hölzl via samba <samba at lists.samba.org> wrote: > > > Hi, > > > > i transfered the roles from DC2 to DC1: > > > > root at dc1:~# samba-tool fsmo transfer

Am 12.01.23 um 12:25 schrieb Rowland Penny via samba: > > On 12/01/2023 10:53, Thorsten Marquardt via samba wrote: >> Thank you so far. But unfortunately I could not fix the problems. So I >> decided to start over again at a situation where all the fsmo roles >> resides on the old controller. >> >> Here is a transcript of what I did and the errors reported:

On 12/01/2023 10:53, Thorsten Marquardt via samba wrote: > Thank you so far. But unfortunately I could not fix the problems. So I > decided to start over again at a situation where all the fsmo roles > resides on the old controller. > > Here is a transcript of what I did and the errors reported: > > The inititial position > > srv-kb-dc1:~ # samba-tool fsmo show >

On 12/01/2023 12:28, Thorsten Marquardt via samba wrote: > > Okay back to the start an I try again. This time role by role. Here I > don't get timeouts (why do they come up with role=all ?) and I'm not > prompted for password of DOMAIN\root You should never get prompted for the password for 'DOMAIN\root', if you do, then you doing something wrong or something has

Hi. root at gteste2:~# root at gteste2:~# samba-tool fsmo transfer --role=all -UAdministrador --password=####### This DC already has the 'rid' FSMO role This DC already has the 'pdc' FSMO role This DC already has the 'naming' FSMO role This DC already has the 'infrastructure' FSMO role This DC already has the 'schema' FSMO role ERROR(<type

On 07/19/2019 03:08 PM, Rowland penny via samba wrote: > On 19/07/2019 20:41, Robert A Wooldridge via samba wrote: >> I have transferred all fsmo's except domain and forest.? When I >> attempt either one of these I get this error: >> >> samba-tool fsmo transfer --role=forestdns >> ERROR: Failed to delete role 'forestdns': LDAP error 50 >>

Being a newbie to Samba 4 and OpenLDAP I am setting up a DC going exactly by the rules, testing and taking my time. I got to the point where I would switch, just testing, roles from DC1 to DC2 and vice versa. Switching all roles from DC1 to DC2 was a piece of cake, reswitching "domaindns" and "forestdns" to DC1 wasn't, though: samba-tool fsmo transfer --role=domaindns -k

Have joined a new DC to an existing AD and am trying to transfer the fsmo roles to the new DC with a view to retiring the old DC. The forestdns role transfer failed with the error: ERROR(<class 'AttributeError'>): uncaught exception - module 'samba' has no attribute 'drs_utils' all the other roles transferred successfully. The console output is below: root at