[Samba] backup AD content

[Stefan G. Weichinger]

On 30.08.19 11:01, Andrew Bartlett wrote:
> On Fri, 2019-08-30 at 10:56 +0200, Stefan G. Weichinger via samba
> wrote:
>> I happily and trustfully use Louis' backup-script from
>>
>> https://github.com/thctlo/samba4
>>
>> to dump AD content via cronjob.
>>
>> Is it necessary/recommended to do that on *each* samba DC? Is there
>> something server-specific in the dump(s) or is it enough to do that
>> once
>> per domain?
> 
> I'm very sorry to advise that this script is not race-free in the
> locking done on the AD databases, which is why we have written the
> 'samba-tool domain backup offline' tool which holds the correct locks.

Thanks for the info, I will write another cronjob using that tool.

> You should only need to back up the domain on one DC as long as you are
> confident the DC is correctly synchronised, including sysvol.

Ok, fine. IMO I would set that up on the DC holding the FSMO roles?