[Samba] Upgrading Samba in a Multi DC environment

Marc Muehlfeld mmuehlfeld at samba.org
Thu Aug 21 11:02:08 MDT 2014

Hello Chris,

Am 21.08.2014 10:32, schrieb Chris Alavoine:
> I currently have 5 DC's all running 4.1.5 and would like to upgrade them to
> 4.1.11.
> Should I upgrade the FSMO DC first and then the others or perhaps the other
> way around?

There's no special order to follow.

The FSMO roles are just a few attributes inside the AD, that defines,
which DC(s) are responsible for the 5 different jobs (roles). They
doesn't matter when you upgrade.

> Can anyone see any pitfalls here?

No. There should be nothing special if your current version isn't an
early 4.0 or prior 4.0.11/4.1.1.


If you want, you can check for errors in your AD:
# samba-tool dbcheck --cross-ncs

> Also, should I just:
> 1. stop samba
> 2. ./conffigure && make && make install
> 3. restart samba


> I am also planning on switching to BIND_DLZ (currently running Samba
> Internal DNS). Would it be wise to perform this change before upgrading or
> vice versa?

Doesn't matter. But usually I don't recommend to make two new steps at
once, because it could make identifying the reason for problems more
difficult ("caused the update your DNS problems or the new backend?").

A guide for the DNS backend switch you find here:


More information about the samba mailing list