[Samba] how to remove an (offline) DC from Samba 4 ?

[Bram Matthys]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi all,

What would be the recommended way to remove an old offline DC from Samba4?

I searched in samba-tool for a way to do this, but didn't find any.
Tried using the Windows tools to manage AD Users & Computers -> Domain
Controllers -> The DC & then hit delete, however this gives an error 'cannot
find specified module'.
On https://wiki.samba.org/index.php/Samba4/DRS_TODO_List I read this is
likely a known issue:
"Fix DsRemoveDSServer

Removing a DC from the Domain Controllers container when using windows
user/group admin tool against a s4 DC fails with "bad stub data". It
generated a fault on the wire. "

Given that both samba-tool and the using the ADUC tools are a dead end, what
should I do?

Should I start messing with ldbedit/ldbdel? I'm worried to mess up things,
especially dead references to the old DC. Or is this the way to go.

This is on samba 4.1.4, running as AD, with all FSMO roles seized (in case
it matters).

Any help would be appreciated.

Thanks,

Bram.

- -- 
Bram Matthys
Software developer/IT consultant        syzop at vulnscan.org
Website:                                  www.vulnscan.org
PGP key:                       www.vulnscan.org/pubkey.asc
PGP fp: EBCA 8977 FCA6 0AB0 6EDB  04A7 6E67 6D45 7FE1 99A6
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iF4EAREIAAYFAlMB2TgACgkQbmdtRX/hmaZ1/QD9EQo9g5DZ3ml/9ZkSQH5Y2cY5
1HpDgR6J0nWt8Yiu4D4A/R0MB+wdiDIfXmga+o9ep7sy083cE/Z6xKL7RNoCqoXc
=aPzr
-----END PGP SIGNATURE-----