[Samba] Demote/Promote Samba DC

[Andrew Bartlett]

On Wed, 2021-04-21 at 08:19 +0200, Stefan Bellon via samba wrote:
> Not sure whether this has anything to do with it ... but I demoted
> our
> old Samba 4.2 server yesterday from the domain as well.
> 
> While "samba-tool domain demote -Uadministrator" worked fine and
> reported success, in the DNS there were still ~20 records referring
> to
> that old DC. I stopped the old Samba 4.2, removed the BIND9 DLZ
> integration on that old DC, restarted all BIND instances (also
> those on the newer Samba 4.13.5 DCs) ... still, all the records
> remained.
> 
> I ended up starting DNS tools on Windows and opened the whole tree,
> went through the entries one by one and deleted all that were still
> referring to the old DC (except of course the actual A and AAAA
> records).
> 
> I think, "domain demote" only takes care of part of the demotion?

Pretty much.  I wrote an additional mode --remove-other-dead-server
which is far more brutal because of this.

Andrew Bartlett

-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions