[Samba] Unable to transfer ForestDns/DomainDNS

[Andrew Bartlett]

On Thu, 2016-06-23 at 08:37 -0400, Jason Waters wrote:
> Ideally I would get the transfer to just work, but if I can't do that
> then
> I have a question about the path forward.  Since I would like to keep
> the
> PDC up, do I run dcpromo on PDC(Win2003) and get it out of the domain
> and
> then do the samba-tool fsmo seize, or the other way around?  Or
> doesn't it
> matter?  My concern is the big scary messages about NEVER EVER start
> the
> machine again that you seized the fsmo from for fear of your entire
> AD
> blowing up and zombie apocalypse starting.  But I thought once you
> run the
> dcpromo and demote the DC active directory is gone and then it won't
> break
> AD on the good domain.

Samba doesn't care about the fsmo role owner for forestdnszones or
domaindnszones at the moment.  I'm not sure what they are for (I'm sure
they have a purpose, but I've not researched it).

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba