[Samba] Help us with finishing the KCC (ending full-mesh replication on the Samba4 AD DC)

[Andrew Bartlett]

I've been slowly reviewing our KCC patch series by Douglas and Garming
into Samba git master over the past few days, and I expect that to be
fully merged shortly.  The purpose of this work is to change Samba from
full-mesh replication to respecting site boundaries, and so trying to
reduce WAN replication traffic. 

However, I need the help of Samba administrators to ensure this work is
ready for production.

I need more samples of complex Windows and Samba networks, preferably
with multiple sites, connections and any other features we may encounter
in the real world. 

Using git master, run

./source4/scripting/bin/samba_kcc --exportldif=mysite.ldif -H
ldap://win2012r2-2.ad.example.com -Uadministrator%password

Then look at the result.  If you are happy to have it included in Samba
as a text fixture, in our PUBLIC git repo, then mail it back to
samba-technical as a signed-off git commit adding it as a file to
testdata/

If you want me just to validate it privately before we turn on the KCC
for the first time, then mail it to me clearly marked PRIVATE.

You may redact it for your domain name, but (as I just tried that) be
careful, it is a little more tricky that you would hope, as the lines
wrap half-way along the domain names in the DN values!

Thanks!

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba