[Samba] best practice for migrating win-dc to samba-dc
tbskyd at gmail.com
Tue May 8 10:23:40 UTC 2018
I want to test migrating windows dc to samba dc (without
considering sysvol replication).
I installed brand new 2003R2, 2008R2, 2012R2 (with 2008R2
I compiled samba 4.7.7, 4.8.1 at centos 7.4.
1. I tried to join samba as DC to windows with command:
samba-tool domain join samdom.example.com DC
4.7/4.8 to all windows version above success.
2. I tried to demote windows DC. "dcpromo" or similar gui from
windows failed. so I try to transfer role to samba with command:
samba-tool fsmo transfer --role=all -U Administrator
the command need to type several times since it will hang.
however, 'domaindns' and 'forestdns' roles transfer never success.
under 2003R2/2008R2 it gave the same error again and again. under
2012R2 it finally said nobody owns the role after several times.
3. "dcpromo" at windows still failed at windows under current
situation. so I can only seize the two dns roles with command:
samba-tool fsmo seize --role=all -U Administrator
now samba has all 7 fsmo roles.
4. "dcpromo" still failed at windows. so I can only shutdown
windows and force delete it with command:
samba-tool domain demote --remove-other-dead-server=WIN-DC
2003R2/2008 R2 success. the windows DC is destroyed. so I think
the migration completed.
but I can not make the final step work for 2012R2. the result below:
Removing nTDSDSA: CN=NTDS
ERROR(ldb): uncaught exception - subtree_delete: Unable to delete a
non-leaf node (it has 1 children)!
line 176, in _run
return self.run(*args, **kwargs)
line 730, in run
remove_dc.remove_dc(samdb, logger, remove_other_dead_server)
line 423, in remove_dc
line 351, in offline_remove_ntds_dc
line 230, in offline_remove_server
A transaction is still active in ldb context [0x1f72f50] on
any hint to resolve the error?
More information about the samba