similar to: Demote a samba DC and rejoin as member

Hi Andreas, > I had tried to demote a samba DC and re-join it as a member over the > weekend, but something went horribly wrong. > > Starting point was a samba DC which also acted as a file server. It was > the single DC in that domain. > > I first set up a Windows 2008 R2 machine and promoted it to DC within > the same domain. I then changed DNS entries on all machines to

Am 15.01.2018 um 11:35 schrieb Denis Cardon via samba: > Yes, when switching, it is much safer to clean up your /var/lib/samba. > Be sure to recreate the /var/lib/samba/private folder after cleanup, > that folder is not recreated automatically most of the time. > > There is nothing very complicated in what you wanted to do. Just be > sure to double check the replication before

I'm trying to remove a DC from a Samba4 based AD network, but run into an error that I can't fathom. Can anyone point me in the right direction? # samba-tool domain demote -Uadministrator GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego' registered GENSEC

Following: https://wiki.samba.org/index.php/Demoting_a_Samba_AD_DC i've demoted and removed a DC. Seems all went as expected: root at vdcud1:~# samba-tool domain demote --server=vdcsv1.ad.fvg.lnf.it -U gaio Using vdcsv1.ad.fvg.lnf.it as partner server for the demotion Password for [LNFFVG\gaio]: Deactivating inbound replication Asking partner server vdcsv1.ad.fvg.lnf.it to synchronize

Hi all, After installing a bunch of new AD DC using the 4.3.1 version I decided to remove the old ones. On one DC I've set up log level as follow: log level = 1 auth:9 registry:7 winbind:7 passdb:7 sam:3 rpc_srv:2 rpc_cli:2 First I'm not sure this is the right way to declare specific log levels but man smb.conf gives me: Example: log level = 3 passdb:5 auth:10 winbind:2 So it sems, to

Hi, I'm trying demote my old DC, but the following message appear: root at dc-old:~# samba-tool domain demote -Uadministrator Using dc1.empresa.com.br as partner server for the demotion Password for [EMPRESA\administrator]: Deactivating inbound replication Asking partner server dc1.empresa.com.br to synchronize from us Failed to bind - LDAP error 8 LDAP_STRONG_AUTH_REQUIRED -

Hello, I am running in a duplicate test environment of my work domain. I have 2 x 4.1 DCs and 2 x 4.7 DCs. I have transferred FSMO role to #3 and it is replicating to #4 fine. I have demoted #1 which appeared to go fine and have turned it off. When I try to demote #2 it fails with the error... Using dc3.domain.com as partner server for the demotion Password for [DOMAIN\administrator]:

Hello! I'm trying to remove a DC from our samba domain (samba 4.17.4). It was the primary controller (with FSMO roles), - I successfully transferred the roles to another DC. Now it's time to demote: ai# samba-tool domain demote -U mjt-adm Using svdcp.tls.msk.ru as partner server for the demotion Password for [TLS\mjt-adm]: Deactivating inbound replication Asking partner server

Demotion of a AD DC fails with the following errors: If I explicitly select a partner server with the "--server=" option the error is: Deactivating inbound replication Asking partner server [selectedDC] to synchronize from us Error while demoting, re-enabling inbound replication ERROR(<type 'exceptions.UnboundLocalError'>): uncaught exception - local variable

Hi all, I am consistently getting the error: root at dc2:~# samba-tool domain demote -Uadministrator Using dc1.microlynx.com as partner server for the demotion Password for [MICROLYNX\administrator]: Deactivating inbound replication Asking partner server dc1.microlynx.com to synchronize from us Changing userControl and container ERROR(<type 'exceptions.TypeError'>): uncaught

Thanks Rowland. Have submitted a bug report (No 11818). spindles7 On Thu, 31 Mar 2016 09:38:02 +0100, Rowland penny <rpenny at samba.org> wrote: >On 30/03/16 23:26, spindles7 wrote: >> Hi all, >> I am consistently getting the error: >> >> root at dc2:~# samba-tool domain demote -Uadministrator >> Using dc1.microlynx.com as partner server for the demotion

On Sun, 14 Aug 2016 19:18:41 +0100 Alex Crow via samba <samba at lists.samba.org> wrote: > > > > > Ok, lets just run through this: > > You have an NT4-style PDC > Correct. > > You classicupgrade this to a DC > Yes, with BIND9_DLZ DNS backend. > > > You join another computer as a DC > > > > At this point, have you checked that all DNS

Hi all, i've got initial setup on DC1 (4.0.1)... all working good and flawless Added additional geographically distributed controllers (DC2, DC3, DC4,DC5) with 4.0.5 - no problem. All PC's can connect to their own site/DC Transferred all FSMO's to DC2 - transferred successfully (with seize "error" bug) DC1 crashed badly.... during maintenance, SAMBA was

>From a discussion on samba technical about the inability to have Samba work as a DC when the original DC is a Windows Server 2000 machine. > > as Andrew asked you previously, the main question is : do you have some > > specific requirements for keeping a DC on that computer (eg. Exchange or > > whatever)? > > > > If you don't need to keep the DC role on

On 01/04/16 22:38, spindles7 wrote: > Hi Rowland, > Have tried your patch, and now the Demote succeeds: > > root at dc3:~# samba-tool domain demote -Uadministrator > Using dc1.microlynx.com as partner server for the demotion > Password for [MICROLYNX\administrator]: > Deactivating inbound replication > Asking partner server dc1.microlynx.com to synchronize from us >

thank you rowland, Il 08/02/2018 10:41, Rowland Penny via samba ha scritto: > On Thu, 8 Feb 2018 10:30:55 +0100 > Massimo Donato via samba <samba at lists.samba.org> wrote: > >> Hi to All, >> i'm wondering to do again domain provision. >> anyone that tryed this? >> any idea on how to have the previous users profiles imported in the >> new domain ?

> Am 31.12.2017 um 17:32 schrieb Rowland Penny via samba <samba at lists.samba.org>: > > On Sun, 31 Dec 2017 16:18:27 +0100 > Götz Reinicke via samba <samba at lists.samba.org> wrote: > >> Hi, >> >> we have three 4.6.x AD servers in a cluster > > What do you mean by 'a cluster' ? > > If you mean an actual cluster, how are you

Mandi! Denis Cardon via samba In chel di` si favelave... > what version of Samba are you running? Recent versions do a much better job > at DNS cleaning during demote. Eh, domain controllers are still on samba 4.5... > I also advise you to run the demote on another DC than the one you are > demoting (samba-tool doamin demote --remove-other-dead-server=xxxxx). > Running a

Hello everyone! I am having a problem while demoting a DC. The DC i want to demotes is still online. When i try to use the command samba-tool domain demote this is the message i get: root at hoorn:/home/newhang# samba-tool domain demote ERROR: Current DC is still the owner of 2 role(s), use the role command to transfer roles to another DC root at hoorn:/home/newhang# But after a fsmo show,

Hi together, Demoting from a Win-Server-Based Active Directory fails root at srvf01:~# samba-tool domain demote --server windc-server -UAdministrator Using srv15.lan.compumaster.de as partner server for the demotion Password for [COMPUMASTER\Administrator]: Desactivating inbound replication Asking partner server windc-server to synchronize from us Error while demoting, re-enabling inbound