[Samba] Upgrade in-place to 4.8

[Andrew Bartlett]

On Wed, 2018-03-14 at 09:02 -0400, lingpanda101 via samba wrote:
> 
> 
> Hello,
> 
>      I have a few questions on the above. My upgrades since Samba 4.0 
> has always been in place as reference. The first change regarding 'New 
> GUID index mode'.  Does this mean when I upgrade 1 of my current 4.7.x 
> DC's to 4.8.0, the other remaining 4.7.x DC's will not replicate until 
> they have been updated?

No, this is an internal storage update.  However if you re-join you
will also get the in-place encryption and a faster storage method for
group memberships (sortedLinks).

>  I normally update one DC at a time and verify 
> replication is still working before preceding on to the next.

That should be fine. 

> The other feature 'KDC GPO application'. Will the command 'samba-tool 
> domain passwordsettings show' display the GPO settings? I take it the 
> account lockout duration/threshold and reset account lockout must still 
> be set via. samba-tool? Thanks.

It means that whatever is set in the GPO will override this, and be
shown by the command.  (That is why it is off by default at the moment,
as folks have got used to needing the 'samba-tool domain
passwordsettings set' value being authoritative).

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba