[Samba] Transferring fsmo roles to new DC2

[Rowland Penny]

On 16/01/2023 10:52, Callum G. MacEwan via samba wrote:
> 
>> Yes, probably, but why are they not there ?
>> I think you need to give us a bit more info:
>> What OS
> Debian
>>
>> What version of Samba
> Samba 4.17.4
>> Are you using Bind9
> No using internal bind

I take it that means the internal dns server and not a separate dns server.

>> How was the domain provisioned
> samba-tool as per wiki
>>
>>
>> If you run this on the DC:
>>
>> ldbsearch --cross-ncs -H /var/lib/samba/private/sam.ldb -b 
>> DC=DomainDnsZones,DC=balewan,DC=pegasusnz,DC=com '(cn=Infrastructure)'
> 
> root at DC2:/etc/sudoers.d#  ldbsearch --cross-ncs -H 
> /var/lib/samba/private/sam.ldb -b 
> DC=DomainDnsZones,DC=balewan,DC=pegasusnz,DC=com '(cn=Infrastructure)'
> 
> # record 1
> 
> dn: CN=Infrastructure,DC=DomainDnsZones,DC=balewan,DC=pegasusnz,DC=com
> 
> objectClass: top
> 
> objectClass: infrastructureUpdate
> 
> cn: Infrastructure
> 
> instanceType: 4
> 
> whenCreated: 20221203031619.0Z
> 
> whenChanged: 20221203031619.0Z
> 
> uSNCreated: 5428
> 
> uSNChanged: 5428
> 
> showInAdvancedViewOnly: TRUE
> 
> name: Infrastructure
> 
> objectGUID: e27698d8-a43b-4b74-8e51-91cf1b6cdaf3
> 
> fSMORoleOwner: CN=NTDS 
> Settings,CN=CAPSICUM,CN=Servers,CN=Balewan-Orchards,CN=Sites,CN=Configuration,DC=balewan,DC=pegasusnz,DC=com

Hmm, so it isn't in the 'Default-First-Site-Name' site, I wonder if this 
is the problem ? Let me go and have a read of the code and get back to you.

Rowland