[Samba] It is secure to transfer roles and demote DC?

[Marc Muehlfeld]

Hello Federico,

Am 07.11.2014 um 12:53 schrieb Federico Alberto Sayd:
> 1st - Docs says that isn't recommended run a File Server as DC ("Even if
> the Domain Controller can act as a File Server as well, it's not a
> recommendation" [1])
> [1] https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO

I'm not sure, if this is still valid, with the winbindd changes in 4.2.

But in general it's not best practice to host other services on DCs. But
it would work.



> 2nd - The file server is experiencing hig load (I think, because to high
> I/O) and DNS resolution goes low and clients using this DC lose
> connectivity

What about moving the content to a member server, remove the shares from
the DC and let the host continue to be just a DC?

I don't know the size of your installation and how many DCs you have.
But 2 DCs are the recommended minimum anyway for failover reasons in a
domain. If you have different sites, this number would increase.


Regards,
Marc