[Samba] Internal DNS migrate to Bind9_DLZ

[Rowland Penny]

On Thu, 01 Nov 2018 15:25:42 +0100
Jiří Černý via samba <samba at lists.samba.org> wrote:

> Hello,
> sorry, but I cannot find start of this discussion thread, so my
> question may be stupid. Is your domain classicupgraded from Samba 3
> or provisioned from scratch?
> 
> I have similar problem with our domain which is upgraded. If I
> provision the new domain everything works, but in old domain there is
> something broken inside.

I personally have never been a fan of the classicupgrade, it brings
along too much garbage.

> 
> For Rowland:
> Does exist utility with similar function as "net rpc vampire"? My
> idea is to provision brand new domain with SIDs, RIDs and
> users/groups/passwords from old (broken) Samba 4 AD domain. Because
> in bigger environments is practically impossible to migrate all user
> accounts and rights. Maximum sacrifice is to rejoin all Windows
> stations, but SIDs must be 1:1.
> 

The only way to upgrade is via the classicupgrade script, but if you
can dump everything into an ldif, you may be able to script around the
ldif and samba-tool domain provision --domain-sid=YOUR-SID

Rowland