[Samba] FMSO transfer gone wrong

Arne Zachlod arne at nerdkeller.org
Sun Apr 5 16:47:42 UTC 2020


I'm currently in the process of updating our Samba environment from 4.3 
to 4.11. Looks like I did something wrong. Some pointers would be much 

Since I wanted to migrate from Ubuntu to Debian anyway, I decided to not 
upgrade in place, but instead create new VMs, join them and then remove 
the old 4.3 ones. Everything went well until I also wanted to transfer 
FSMO roles to a new VM.

Since 'samba-tool fsmo transfer --role=all' didn't work, I decided to 
use seize instead. There was no error output other than the expected 
error that the transfer didn't work and I shut the old FSMO master DC down.

So, now nothing really works as expected: the other DCs didn't get the 
memo to change to the new FSMO master DC and I cant find any 
documentation on how to change that by hand.

Also, drs showrepl request take forever to finish on the now 
disconnected DCs while they just timeout on the FSMO master.

Not sure if that helps, but my smb.conf is attached :)


---- smb.conf ----

	workgroup = xxx
	realm = int.xxx.xx
	netbios name = ADDC11
	server role = active directory domain controller
	dns forwarder =
	idmap_ldb:use rfc2307 = yes
	server signing = Auto

	path = /var/lib/samba/sysvol/int.xxx.xx/scripts
	read only = No

	path = /var/lib/samba/sysvol
	read only = No

More information about the samba mailing list