[PATCH] [WIP] AD DC backup and restore tool

[Rowland Penny]

On Thu, 31 May 2018 12:12:33 +0200
L.P.H. van Belle <belle at bazuin.nl> wrote:

> Hai, 
> 
> Sorry for the intrusion. A sidenote here. 
> 
> How are you going to detect if the domain in question is in
> pre-production? 
> 
> This is only going to work if you have 0 computers in to domain or
> you should wipe the domain to all default and rename it. But thats
> not wat people want, they want to change a running domain with
> computers and users in it. 
> 
> Sorry, but imo worst function samba can add here.
> 
> This will give lots of problems just because people are going to try
> this and end up with a domain without any working computer in it. Or
> gets a new function, fill the eventlogs with messages about the
> domain change.. 
> 
> Im working with with AD or the better version of MS-AD => Novell DS a
> long time now. Any rename i encountered ended up in lots of problems,
> maybe not for DC's itself but it does for any joined computer/server.
> Also, if a domain is in pre-production, then is better the stop
> samba, cleanup and reprovision. 
> 
> But again, my opinion and concerns.
> Please think about this very carefully, how to inform users, that
> this should not be done on a setup in production. 
> 
> 
> Best regards, 
> 
> Louis
> 

There is a big problem with renaming an active directory domain. If
Samba AD is compatible with Windows AD, then at some point a Windows
DC running Exchange will be added, at this point the rename will stop
working, because you cannot rename an exchange server.

Rowland