Re: [Samba] Problem to demote Samba4 DC
Hi Greg, Thank you for your answer. Yes, I installed the dns service in the same time I promoted the windows server. When I checked the windows dns, it seemed to be well populated but there maybe some deep record that I missed. So, when I tried to stop samba windows used it's own dns server. Is there any known issues with the dns replication between Samba4 and Windows ? Best regards, Davy HUBERT DSI/SMI - Unité Systèmes Université Paul-Valéry, Montpellier 3 davy.hub...@univ-montp3.fr Le 24/09/2013 16:25, Gregory Sloop a écrit : If you haven't moved DNS to the Windows box, then you turn off the Samba box, you're going to have serious problems. So, yes, I'd guess it's a DNS problem. [Here's hoping you still have all your limbs :) ] -Greg DH I recently migrated our samba 3 domain to an AD domain using Samba 4 DH classic upgrade tool. DH DNS is provided by the internal dns server of Samba 4. DH I promoted a Windows 2k8 box as a new DC of this domain and I transfer DH all the 5 FSMO roles to this windows box. DH Now I would like to demote the Samba4 DC but when I tried I got this DH message : DH # samba-tool domain demote DH ERROR: Current DC is still the owner of 2 role(s), use the role command DH to transfer roles to another DC DH When check the fsmo roles status via samba-tool fsmo show on linux or DH with ntdsutil on windows it confirms that the Samba 4 DC doesn't own DH anything. DH Then, I tried to just stop samba4 and follow the microsoft procedure to DH remove a failed DC. But when I do that the domain fails, i've got an DH error message when i try to open any AD tool (ADUC for example) saying DH that the domain cannot be found. DH It seems that something is handled by Samba only but I can't figure out DH what. DH Is this a DNS problem ? Should I use Bind ? DH Well, it's not urgent... wait a minute, my boss has a chainsaw, maybe I DH should hurry :D . -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problem to demote samba4 dc
Hello Andrew, Sorry for waiting so long to answer you but I would like to be sure to try every thing before. So, I tried to shut down samba and follow the procedure to remove a failed DC, but I when shut down samba my windows DC failed saying me that the domain could not be found when i launched any AD tool (ADUC or Sites and services...). Then, I tried to do it with samba online (thinking there was maybe a dns trick), but it seems that my Windows DC miss something and again i have got this message the domain could not be found. So well, I decided to keep going on and clean any reference of the samba server every where : in directory first using a metadata cleanup through ntdsutil and then in dns manually, but my domain still failed. It seems that windows can't sync something that samba holds but i can't figure out what. I'm stuck at this point now. Best regards, Davy HUBERT DSI/SMI - Unité Systèmes Université Paul-Valéry, Montpellier 3 davy.hub...@univ-montp3.fr Le 05/08/2013 07:17, Andrew Bartlett a écrit : On Fri, 2013-08-02 at 08:34 -0300, Jonis Maurin Ceará wrote: But what roles Andrew? All 5 roles are already on windows DC. What's those 2 left roles and how can we transfer? What I'm saying is just follow whatever advise Microsoft gives for using their GUI tools to remove a dead DC from the AD domain. It shouldn't matter that it's a Samba DC. Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problem to demote samba4 dc
On Fri, 2013-08-02 at 08:34 -0300, Jonis Maurin Ceará wrote: But what roles Andrew? All 5 roles are already on windows DC. What's those 2 left roles and how can we transfer? What I'm saying is just follow whatever advise Microsoft gives for using their GUI tools to remove a dead DC from the AD domain. It shouldn't matter that it's a Samba DC. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problem to demote samba4 dc
But what roles Andrew? All 5 roles are already on windows DC. What's those 2 left roles and how can we transfer? Em 01/08/2013 23:11, Andrew Bartlett escreveu: On Wed, 2013-07-31 at 15:10 +0200, Davy HUBERT wrote: Hi all, I recently migrated our samba 3 domain to an AD domain using Samba 4 classic upgrade tool. Well, every seems to work fine since i'm still alive ;) . I promoted a Windows 2k8 box as a new DC of this domain and I transfer the 5 FSMO roles to it. Now I would like to demote the Samba4 DC but when I tried I got this message : # samba-tool domain demote ERROR: Current DC is still the owner of 2 role(s), use the role command to transfer roles to another DC When check the fsmo roles status via samba-tool fsmo show it confirms that the Samba 4 DC doesn't own anything. How can I manage to demote the Samba 4 box ? The best option would be to turn off the Samba DC, and then use ADUC on Windows and tell it that the Samba DC is permanently off-line. The roles can be seized from there. Andrew Bartlett -- = *Jonis Maurin Ceará* Analista de Sistemas FEA-RP/USP - Ramal: 42-4485 / 42-3927 DDR: (16) 3602-4485 / 3602-3927 Atendimento Web: http://sistemas.fearp.usp.br/suporte = -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problem to demote samba4 dc
On Wed, 2013-07-31 at 15:10 +0200, Davy HUBERT wrote: Hi all, I recently migrated our samba 3 domain to an AD domain using Samba 4 classic upgrade tool. Well, every seems to work fine since i'm still alive ;) . I promoted a Windows 2k8 box as a new DC of this domain and I transfer the 5 FSMO roles to it. Now I would like to demote the Samba4 DC but when I tried I got this message : # samba-tool domain demote ERROR: Current DC is still the owner of 2 role(s), use the role command to transfer roles to another DC When check the fsmo roles status via samba-tool fsmo show it confirms that the Samba 4 DC doesn't own anything. How can I manage to demote the Samba 4 box ? The best option would be to turn off the Samba DC, and then use ADUC on Windows and tell it that the Samba DC is permanently off-line. The roles can be seized from there. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problem to demote samba4 dc
I had the same problem some days ago.no reply from list and still with same problem :( Em 31/07/2013 10:35, Davy HUBERT escreveu: Hi all, I recently migrated our samba 3 domain to an AD domain using Samba 4 classic upgrade tool. Well, everything seems to work fine since i'm still alive ;) . I promoted a Windows 2k8 box as a new DC of this domain and I transfer the 5 FSMO roles to it. Now I would like to demote the Samba4 DC but when I tried I got this message : # samba-tool domain demote ERROR: Current DC is still the owner of 2 role(s), use the role command to transfer roles to another DC When check the fsmo roles status via samba-tool fsmo show it confirms that the Samba 4 DC doesn't own anything. How can I manage to demote the Samba 4 box ? Best regards, Davy. -- = *Jonis Maurin Ceará* Analista de Sistemas FEA-RP/USP - Ramal: 42-4485 / 42-3927 DDR: (16) 3602-4485 / 3602-3927 Atendimento Web: http://sistemas.fearp.usp.br/suporte = -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problem to demote samba4 dc
Hello Davy, Am 31.07.2013 15:35, schrieb Davy HUBERT: I recently migrated our samba 3 domain to an AD domain using Samba 4 classic upgrade tool. Well, everything seems to work fine since i'm still alive ;) . I promoted a Windows 2k8 box as a new DC of this domain and I transfer the 5 FSMO roles to it. Now I would like to demote the Samba4 DC but when I tried I got this message : # samba-tool domain demote ERROR: Current DC is still the owner of 2 role(s), use the role command to transfer roles to another DC When check the fsmo roles status via samba-tool fsmo show it confirms that the Samba 4 DC doesn't own anything. How can I manage to demote the Samba 4 box ? * How did you transfered the roles to to your Samba DC? (through windows, samba-tool, ...?) * What Samba version are you running? fsmo seize wasn't working for a while: https://bugzilla.samba.org/show_bug.cgi?id=9461 * Any errors/messages in the log when you transfer the roles? Please give some more information, to make it easier to help. Regards, Marc -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problem to demote samba4 dc
I had this happen the other day and ran it down to the DomainDNS and ForestDNS not transferring fully. I haven't yet had time to file a bug on this. Ricky On Wed, Jul 31, 2013 at 8:35 AM, Davy HUBERT davy.hub...@univ-montp3.frwrote: Hi all, I recently migrated our samba 3 domain to an AD domain using Samba 4 classic upgrade tool. Well, everything seems to work fine since i'm still alive ;) . I promoted a Windows 2k8 box as a new DC of this domain and I transfer the 5 FSMO roles to it. Now I would like to demote the Samba4 DC but when I tried I got this message : # samba-tool domain demote ERROR: Current DC is still the owner of 2 role(s), use the role command to transfer roles to another DC When check the fsmo roles status via samba-tool fsmo show it confirms that the Samba 4 DC doesn't own anything. How can I manage to demote the Samba 4 box ? Best regards, Davy. -- Davy HUBERT DSI/SMI - Unité Systèmes Université Paul-Valéry, Montpellier 3 davy.hub...@univ-montp3.fr -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/**mailman/options/sambahttps://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problem to demote samba4 dc
In my case, all transfer was made using windows GUI and no errors, everything fine.except those 2 'extra' roles, which i don't know (and fsmo show doesn't show). Em 31/07/2013 11:00, Ricky Nance escreveu: I had this happen the other day and ran it down to the DomainDNS and ForestDNS not transferring fully. I haven't yet had time to file a bug on this. Ricky On Wed, Jul 31, 2013 at 8:35 AM, Davy HUBERT davy.hub...@univ-montp3.frwrote: Hi all, I recently migrated our samba 3 domain to an AD domain using Samba 4 classic upgrade tool. Well, everything seems to work fine since i'm still alive ;) . I promoted a Windows 2k8 box as a new DC of this domain and I transfer the 5 FSMO roles to it. Now I would like to demote the Samba4 DC but when I tried I got this message : # samba-tool domain demote ERROR: Current DC is still the owner of 2 role(s), use the role command to transfer roles to another DC When check the fsmo roles status via samba-tool fsmo show it confirms that the Samba 4 DC doesn't own anything. How can I manage to demote the Samba 4 box ? Best regards, Davy. -- Davy HUBERT DSI/SMI - Unité Systèmes Université Paul-Valéry, Montpellier 3 davy.hub...@univ-montp3.fr -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/**mailman/options/sambahttps://lists.samba.org/mailman/options/samba -- = *Jonis Maurin Ceará* Analista de Sistemas FEA-RP/USP - Ramal: 42-4485 / 42-3927 DDR: (16) 3602-4485 / 3602-3927 Atendimento Web: http://sistemas.fearp.usp.br/suporte = -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Problem to demote samba4 dc
Hello Marc, Le 31/07/2013 15:50, Marc Muehlfeld a écrit : Hello Davy, Am 31.07.2013 15:35, schrieb Davy HUBERT: I recently migrated our samba 3 domain to an AD domain using Samba 4 classic upgrade tool. Well, everything seems to work fine since i'm still alive ;) . I promoted a Windows 2k8 box as a new DC of this domain and I transfer the 5 FSMO roles to it. Now I would like to demote the Samba4 DC but when I tried I got this message : # samba-tool domain demote ERROR: Current DC is still the owner of 2 role(s), use the role command to transfer roles to another DC When check the fsmo roles status via samba-tool fsmo show it confirms that the Samba 4 DC doesn't own anything. How can I manage to demote the Samba 4 box ? * How did you transfered the roles to to your Samba DC? (through windows, samba-tool, ...?) I transfered the roles through windows from Samba to Windows ;) so now window has all fsmo roles and i can't demote the samba dc. * What Samba version are you running? fsmo seize wasn't working for a while: https://bugzilla.samba.org/show_bug.cgi?id=9461 # samba -V Version 4.0.6 * Any errors/messages in the log when you transfer the roles? Nop :( Please give some more information, to make it easier to help. Regards, Marc Thank you for your help :) Regards, Davy HUBERT DSI/SMI - Unité Systèmes Université Paul-Valéry, Montpellier 3 davy.hub...@univ-montp3.fr -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
