[Samba] Change of DC name

[Mario Codeniera]

Thanks a heap, Rowland for explanations and got insights out of it, it's
working well however found out that there's one issue if change the realm
to 'sandbox.net' as we have an existing AD domain with the same name but
don't have access. Supposedly the plan will make SAMBA with 1-way-trust to
the existing Windows AD.

I contacted them to add an alias pointing to lumad.sandbox.net in our DNS
which works now.

nslookup
> set type=SRV
> _ldap._tcp.lumad.sandbox.net
Server:    192.168.2.2
Address:  192.168.2.2#53

Non-authoritative answer:
_ldap._tcp.lumad.sandbox.net  service = 0 100 389
lumad-dc1.lumad.sandbox.net.

Authoritative answers can be found from:
_tcp.lumad.sandbox.net  nameserver = lumad-dc1.sandbox.net.
lumad-dc1.sandbox.net  internet address = 192.168.254.254



Cheers,
Mario

On Wed, Jan 22, 2020 at 9:23 PM Rowland penny via samba <
samba at lists.samba.org> wrote:

> On 22/01/2020 02:57, Mario Codeniera via samba wrote:
> > Hi,
> >
> > Is it possible to change a DC name? as I could not see an option/argument
> > to change using the classicupgrade.
> >
> > Everything works well except for the DNS which I need to point to the
> samba
> > server for every machine clients (in my windows clients, I manually point
> > it to 192.168.254.254).
> >
> > samba-tool domain classicupgrade --dbdir=/usr/local/samba-dec2019/private
> >   --realm=lumad.sandbox.net --dns-backend=SAMBA_INTERNAL
> /srv/samba/smb.conf
> >
> > root at lumad-dc1 lumad2019]# samba-tool domain info 192.168.254.254
> > Forest           : lumad.sandbox.net
> > Domain           : lumad.sandbox.net
> > Netbios domain   : LUMAD
> > *DC name          : lumad-dc1.lumad.sandbox.net
>
> Your problem isn't that you need to change your DC name (which is
> lumad-dc1), it is that your DC appears to be in the 'lumad.sandbox.net'
> dns domain (realm must be same as the dns domain), but your DHCP server
> is handing out 'sandbox.net' as the dns domain.
>
> There are several ways around this:
>
> Run the classic upgrade again, but this time with your DC in the
> 'sandbox.net' dns domain and with '--realm=sandbox.net' in the
> samba-tool line. This could lead to other problems as the new DC will be
> authoritative for the 'sandbox.net' dns domain and if you are using dhcp
> on that dns domain, you probably already have dns servers for that
> domain already.
>
> Change the IP subnet so it is different from 'sandbox.net' and then run
> your own dhcp server (This could be on your DC)
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>