[Samba] Transfer FSMO roles to a new DC

[Rowland Penny]

On Fri, 2021-10-29 at 14:38 -0400, Rommel Rodriguez Toirac via samba
wrote:
> El 29 de octubre de 2021 14:06:28 GMT-04:00, Rowland Penny via samba
> <samba at lists.samba.org> escribió:
> > On Fri, 2021-10-29 at 13:57 -0400, Rommel Rodriguez Toirac via
> > samba
> > wrote:
> > > 
> > > root at gtmad2:~# cat /etc/hostname
> > > gtmad2
> > > root at gtmad2:~# cat /etc/hosts   
> > > 127.0.0.1       localhost
> > > ::1             localhost ip6-localhost ip6-loopback
> > > ff02::1         ip6-allnodes
> > > ff02::2         ip6-allrouters
> > > # --- BEGIN PVE ---
> > > 192.168.41.8 gtmad2.gtm.onat.gob.cu gtmad2
> > > # --- END PVE ---
> > > root at gtmad2:~# cat /etc/resolv.conf 
> > > # --- BEGIN PVE ---
> > > search gtm.onat.gob.cu
> > > nameserver 192.168.41.18
> > > 
> > > this 192.168.41.18 is the IP of the gtmad1, the one from where
> > > were
> > > transfered the FSMO roles
> > 
> > That could be your problem, it should be 'nameserver 192.168.0.8' ,
> > its
> > own ip
> > 
> > Rowland
> > 
> > 
> > 
> 
>  I change the IP address of the DNS Server and I have a lot of
> issues.
> 
> root at gtmad2:~# samba-tool dns serverinfo gtmad2.gtm.onat.gob.cu
> Failed to connect host 192.168.41.8 on port 135 -
> NT_STATUS_CONNECTION_REFUSED
> Failed to connect host 192.168.41.8 (gtmad2.gtm.onat.gob.cu) on port
> 135 - NT_STATUS_CONNECTION_REFUSED.
> ERROR: Connecting to DNS RPC server gtmad2.gtm.onat.gob.cu failed
> with (3221226038, 'The transport-connection attempt was refused by
> the remote system.')
> 
> 
> root at gtmad2:~# samba-tool domain info 192.168.41.8
> ERROR: Invalid IP address '192.168.41.8'!
> 
>  Wow, is any way to fix all that error? or I have to start from cero?
> (how I can start from cero?)
>  I have to transfer FSMO roles to gtmad1 back again? how to eliminate
> the gtmad2 DC register from Active Directory?

You appear to have problems with your new DC, is Samba running ?
>From information you provided, '192.168.41.8' is the IP of your new DC
and each DC should use itself as its nameserver.

I would at this point transfer the FSMO roles back to the original DC
and demote your new DC and start again.

Rowland