[Samba] second DC behavior when first switched off

[Sam]

I think The problem is here, when the 2 DC are on line, and debug level 
is 3, I can see a lot of messages like :

May 21 16:52:29 S4 named[2289]: samba_dlz: starting transaction on zone 
ariane.intra
May 21 16:52:29 S4 named[2289]: client 172.20.2.33#1226: update 
'ariane.intra/IN' denied
May 21 16:52:29 S4 named[2289]: samba_dlz: cancelling transaction on 
zone ariane.intra

I try to set transactions for DNS to "non secure and secure" to "secure 
only" on the W2003 server, without any effects...
And it can't be changed for Samba4 ( "secure only" by default )
172.20.2.33 is my W2003 server...

Sam


Le 21/05/2015 11:50, Sam a écrit :
> Hello all,
>
> I'm always trying to migrate from W2000 server to Samba 4.
>
> For doing this, I tried this :
> - install a W2003 server with AD and DNS services, join it to W2000, 
> transfer roles and after demote the old W2000 -> done
> - install a Sernet Samba4 with Bind9, join W2003, transfer all 7 roles 
> -> done ( thanks to Rowland )
>
> the sync process is working well in two way, I can manage DNS and AD 
> with rsat tool even directly connected on the Samba4 server
>
> But the samba4 server does not have a good behavior when I switch off 
> the W2003 server...
>
> For example in this case ( W2003 switched off ), if I try to use RSAT 
> AD user and group connected to Samba and go to the directory "Domain 
> Controllers" I see an error message "domain controllers data not 
> available..."
> and in the samba4 syslog :
>
> May 21 11:09:09 S4 samba[2455]: [2015/05/21 11:09:09.682170,  0] 
> ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug)
> May 21 11:09:09 S4 samba[2455]:   ldb: acl_read: CN=W2003,OU=Domain 
> Controllers,DC=ariane,DC=intra cannot find attr[msDS-isRODC] in of schema
> May 21 11:09:09 S4 samba[2455]:
>
> It seems that it missing a Samba4 entry? For asking Samba4 too?
>
> Another question... How to be sure that the sync process between 2 AD 
> is fully terminated and that the servers are ready for a demote process?
>
> Thanks a lot!
>
> Sam
>
>