[Samba] samba-tool domain demote - current DC is still the owner of 2 role(s)

Fernando Rodriguez newhang at gmail.com
Tue Jul 22 02:26:14 MDT 2014

Hello everyone

That could be a thing demoting a DC. I am going to make the test again 
on my it lab as well, to see what happenes.

In anohter hand, I was able to solve the problem. Let me explain...

I was not able to demote my old DC, but still samba-tool fsmo show was 
telling my the owner of the roles was another DC, the demote command was 
telling me there was still 2 roles still on this DC (Same as Petr)

Also, on my samba.log there were a lot on entries like this:

  Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for 
e3514235-4b06-11d1-ab04-00c04fc2dcd2 at ncacn_ip_tcp:c59ec9dc-fb81-4a08-aa49-e734e6a65f07._msdcs.solid-optics.local[1024,seal,krb5] 

So, i turn off my DC i want to demote. with tha off, the other two DC 
were replicating between them not taking care of the third one.

I deleted all the entries poinitng to the old DC (even the ones 
(GUID)._msdcs.domain.local) and with apache directory studio, I deleted 
all the entries on the AD of that server.

Later, instead of maing a cleanup of files and everything, I decided to 
reinstall debian completely (as the server was only acting as a DC). and 
install samba 4 as joined DC following the samba 4 wiki tutorial.

It is runing ok.

Hope it works for somebody else.

On 22/07/2014 6:48, Marc Muehlfeld wrote:
> Hello Petr, hello Fernando,
> Am 21.07.2014 21:14, schrieb Petr MOTEJLEK:
>> I had recently setup a new DC (called dc0) (in accordance with the wiki)
>> and now I would like to demote the old DC (called pdc0 :)). I
>> followed the wiki again, but I ran into the following issue.
>> When trying to demote the old DC, I get this error message:
>> pdc0 # samba-tool domain demote
>> ERROR: Current DC is still the owner of 2 role(s), use the role command
>> to transfer roles to another DC
> you both reported the same problem during the last days:
> http://comments.gmane.org/gmane.network.samba.general/140496
> http://www.spinics.net/lists/samba/msg117640.html
> It seems we maybe hit a bug here. Let me try to demote a DC in my test
> environment today and see what happens there. I'll report the result
> tonight.
> BTW: Petr: What Samba version do you use? And was it self compiled or a
> package (SerNet, Distro, etc)?
> Regards,
> Marc

Este mensaje no contiene virus ni malware porque la protección de avast! Antivirus está activa.

More information about the samba mailing list