[Samba] Upgrade old infrastructure running 4.3 (and 4.13)

[Rowland Penny]

On Wed, 2021-09-01 at 17:29 +0200, Lorenzo Milesi wrote:
> > If the data on the second DC is correct:
> 
> What to check other than dbcheck?
> 
> > Seize the FSMO roles to it.
> > Turn off the first DC.
> > Demote the first DC with:
> > samba-tool domain demote --remove-other-dead-server=FIRSTDC_NAME
> 
> Well, the 4.13 DC (LANDC) is working fine, it's used as
> authentication server and has other servers joined.
> dbcheck throws some notes:
> NOTE: old (due to rename or delete) DN string component for
> fromServer in object CN=5ba66c59-f19c-4b5d-b565-3ff8d03c6562,CN=NTDS
> Settings,CN=LANDC,CN=Servers,CN=Default-First-Site-
> Name,CN=Sites,CN=Configuration,DC=contoso,DC=lan - CN=NTDS
> Settings,CN=DC1,CN=Servers,CN=Default-First-Site-
> Name,CN=Sites,CN=Configuration,DC=contoso,DC=lan
> Not fixing old string component
> NOTE: old (due to rename or delete) DN string component for
> fSMORoleOwner in object
> CN=Infrastructure,DC=DomainDnsZones,DC=contoso,DC=lan - CN=NTDS
> Settings,CN=DC1,CN=Servers,CN=Default-First-Site-
> Name,CN=Sites,CN=Configuration,DC=contoso,DC=lan
> Not fixing old string component
> NOTE: old (due to rename or delete) DN string component for
> fSMORoleOwner in object
> CN=Infrastructure,DC=ForestDnsZones,DC=contoso,DC=lan - CN=NTDS
> Settings,CN=DC1,CN=Servers,CN=Default-First-Site-
> Name,CN=Sites,CN=Configuration,DC=contoso,DC=lan
> Not fixing old string component
> Checked 3534 objects (0 errors)
> 
> while the same check on 4.3 (DC1) has no messages.

This is probably just down to the improvements made to samba-tool
between 4.3.x and 4.13.x . The errors will be there, but the 4.3.x
machine will not have the code to show them.

Rowland