[Samba] Transfer the FSMO roles

Marcio Demetrio Bacci marciobacci at gmail.com
Mon May 1 22:38:58 UTC 2017


I've been thinking if it's better to make a new Samba 4 DC server instead
upgrade the old DC and then transfer the FSMO roles to it and shut down the
old server.

This way the installation would be cleaner and free of any errors of the
old installation.

I'm using Samba 4.2.1 and the result of command below is:

root at EMPRESA:~# samba-tool fsmo show

InfrastructureMasterRole owner: CN=NTDS
Settings,CN=EMPRESA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=com,DC=br
RidAllocationMasterRole owner: CN=NTDS
Settings,CN=EMPRESA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=com,DC=br
PdcEmulationMasterRole owner: CN=NTDS
Settings,CN=EMPRESA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=com,DC=br
DomainNamingMasterRole owner: CN=NTDS
Settings,CN=EMPRESA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=com,DC=br
SchemaMasterRole owner: CN=NTDS
Settings,CN=EMPRESA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=com,DC=br

Do I need to execute the 5 commands below?

*In the new DC*
samba-tool fsmo transfer --role=InfrastructureMasterRole
samba-tool fsmo transfer --role=RidAllocationMasterRole
samba-tool fsmo transfer --role=PdcEmulationMasterRole
samba-tool fsmo transfer --role=DomainNamingMasterRole
samba-tool fsmo transfer --role=SchemaMasterRole

*In the old DC*
samba-tool domain demote -Uadministrator

Regards,

Márcio Bacci


More information about the samba mailing list