[Samba] another demoting that doesn't work

[mourik jan heupink - merit]

Hi,

I have searched here, and noticed some discussion lately on problems 
demoting a dc. In my case, all roles are on DC2, and DC1 & DC3 know that:

root at DC1:/var/log/samba# samba-tool fsmo show
InfrastructureMasterRole owner: CN=NTDS 
Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=company,DC=com
RidAllocationMasterRole owner: CN=NTDS 
Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=company,DC=com
PdcEmulationMasterRole owner: CN=NTDS 
Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=company,DC=com
DomainNamingMasterRole owner: CN=NTDS 
Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=company,DC=com
SchemaMasterRole owner: CN=NTDS 
Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=company,DC=com
root at DC1:/var/log/samba#

and yet, demoting DC1 gives:

root at DC1:/var/log/samba# samba-tool domain demote -Uadministrator
ERROR: Current DC is still the owner of 2 role(s), use the role command 
to transfer roles to another DC
root at DC1:/var/log/samba#

It seems there have been two threads lately on this same subject (by 
Fernando Rodriguez and Petr MOTEJLEK). Could it be that there is a 
problem in samba itself?

In both threads, two roles remained on the to-be-demoted DC. Seems a bit 
too coincidental, doesn't it?

MJ