similar to: Upgraing a DC using the 'DC rejoin' method

On 18/09/2019 13:10, Rowland penny via samba wrote: > On 18/09/2019 12:34, Roy Eastwood via samba wrote: > > I used the DC rejoin method as described in the WiKi to upgrade one of my DCs to version 4.11.0. Following the steps, when I came > > to rejoin the domain, it initially failed, complaining that the DC already existed, but to force the rejoin, remove the files: > >

On 18/09/2019 12:34, Roy Eastwood via samba wrote: > I used the DC rejoin method as described in the WiKi to upgrade one of my DCs to version 4.11.0. Following the steps, when I came > to rejoin the domain, it initially failed, complaining that the DC already existed, but to force the rejoin, remove the files: > secrets.ldb and secrets.tdb. I assume you don't demote the DC before

Hi, I want to upgrade samba 4.8.2 to samba 4.10.7. According to here: https://wiki.samba.org/index.php/Upgrading_a_Samba_AD_DC#Rejoining_the_upgraded_DC best way is to rejoin the server after the upgrade. But also I need to upgrade the OS, in my case it means a new installation from the OS, because an upgrade is not possible, the old and the new version are to different. Can I do this the

On 26/08/2019 06:06, Andrew Bartlett via samba wrote: > On Mon, 2019-08-26 at 06:54 +0200, gizmo via samba wrote: >> And (re)joining is not recommended ? > We do recommend it: > https://wiki.samba.org/index.php/Upgrading_a_Samba_AD_DC > >> There are so many services and computers connected to the samba server, which are not in my hand. >> Means after I upgraded all

On Sun, 08 Apr 2018 13:34:52 +0200 Kris via samba <samba at lists.samba.org> wrote: > W dniu 2018-04-08 12:49, Rowland Penny via samba napisał(a): > > On Sun, 08 Apr 2018 12:31:26 +0200 > > Kris via samba <samba at lists.samba.org> wrote: > > > >> I should try this command sooner. Now I have made full backup and > >> something is missing: >

Hi, This is strange what you are writing. Are you saying, that if Administrator is in Domain Users group = ALL my users have admins rights? Hard to believe. Moreover, I'm unable to delete Administrator from Domain Users group, as this is my basic group (I received such an info). I believe the keytab is needed to sth, cause without it I keep receiving: [2018/04/03 17:32:39.331938, 1]

I'm trying to use the same hostname. The meta cleanup - I can't see the demoted controller in ADUC nor in Active Directory Sites and Services. Shall I try via ntdsutil? Regards, Kris -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of lingpanda101 via samba Sent: Monday, April 2, 2018 9:09 PM To: samba at lists.samba.org Subject: Re: [Samba]

Hi, i want to move my DC from an amd64 debian jessie to a armhf debian jessie. My first guess is to demote the dc and rejoin the new server. Der DC has all FSMO roles and is part of a three DC setup. Would this be the right way or should i choose another way? Regards, Dirk

There was lack of membership in Administrators domain/Builtin group. I had only: Domain Users Group Policy Creator Owners Enterprise Admins Schema Admins Domain Admins I've added and I'll try. Thank you. Any hint with the recreation of keytab file? Regards, Kris -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Rowland Penny via samba Sent:

And (re)joining is not recommended ? There are so many services and computers connected to the samba server, which are not in my hand. Means after I upgraded all our 5 ADs I would have to inform many people about the new name and IP. Thanks

Hi, I have to upgrade 2 different samba AD DC (2 domains) from 4.4.5 to 4.10.7 First is a single server and updaded with in-place upgrade from 4.4.5 to 4.10.7 and all perfect Second environment I need to add a second dc and also upgrade existing server, and I have some question about how to do this: - join second domain server with 4.10.7 - then make in place upgrade on existing server dc1?

Hi all, After demoting one of AD DCs, I’m unable to join the domain again. Demoting was fine. OS is Centos 6 Samba 4.7.6 (with 4.7.4 doesn’t work either) built from sources. klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administrator at DOMAIN.NET.PL Valid starting Expires Service principal 04/02/18 18:44:33 04/03/18 04:44:33 krbtgt/DOMAIN.NET.PL at DOMAIN.NET.PL

Hello, i want to replace the sernet packages with an own one. Because it's the DC, which is the last one which remains, i'm sure, having the same configure/built options would help with replace the binaries and keeping the database. The other DC's (2 raspberries) have been configured and built with (but complete demote/rejoin process): ./configure --prefix=/usr

Hi All, Does anyone know if there's a Samba 4 to Samba 4 migration process? Sounds weird, but it has a logical reason: I've a several-year-old S4 implementation, from an early Alpha (10 I think?) that hasn't been in the best of shape of late - when S4 4.0.0 arrived, I accidentally upgraded using my normal "git pull; ./configure; make; make install" procedure and instead of

Hello Environment: 3 DC. samba Version 4.10.15-Debian I have to change the IP address of one of my DC's. Can I simply: 1. Demote DC 2. Change IP 3. Rejoin with: samba-tool domain join ... or should I do some more things ? Can I keep the old DC name or should I change it? Thanks

Thanks Rowland!!! Missatge de Trenta sis <trenta.sis at gmail.com> del dia dj., 5 de set. 2019 a les 11:52: > > Hi, > > Thanks for your information about DNS config. > About second server and update, I understand that First I have to > transfer role to new added, demote old, and then rejoin and transfer > fsmo roles to source server, right? > My question is related

Hi, I have a samba domain based on Samba version 4.7.4 compiled from sources running on Debian Stretch v 9.3. The domain is working fine, but when I try to add another DC (a Windows Server 2008 Standard Edition) using the Wiki at https://wiki.samba.org/index.php/Joining_a_Windows_Server_2008_/_2008_R2_DC_to_a _Samba_AD it fails with the error: "The operation failed because: The functional

Hi all, I was trying to upgrade samba to 4.8.0 on one of my AD DC (with Centos 6.6). Sadly, there was some compatibility issues (I suppose so): [root at backup samba-4.8.0]# samba-tool drs showrepl ERROR(<type 'exceptions.SyntaxError'>): uncaught exception - invalid syntax (ms_schema.py, line 280) File "/usr/local/samba/bin/samba-tool", line 45, in <module>

In that case, just move all the Samba files once the first server is offline. All the join/demote games suggested here are more likely to cause you trouble than help, due to a bug in our RID Set management:  https://bugzilla.samba.org/show_bug.cgi?id=12394 None of Samba's databases are arch-specific, so if the hostname and IP are the same, just restore the databases and config files and it

Now that CentOS 7.5 ships with Samba 4.7 and has MIT Kerberos support, I would like to migrate away from the Sernet packages. Currently I have two Samba4 DC's. Can I easily swap the packages? Do I need to move all roles from #1 to #2, demote/unjoin, swap packages, rejoin/promote? .. What's the right way to migrate? Thanks in advance! j