[Samba] Joining a new Samba AD DC

[Mark Foley]

on Tue Jul 25 14:38:39 2023 Rowland Penny wrote:

> On 25/07/2023 19:33, Mark Foley via samba wrote:
> > On Jul 24 13:30:11 2023 Rowland Penny via samba <samba at lists.samba.org> wrote:
> > 
> >>> Did you also sync Sysvol ?
> >>> On a newly joined DC, there is very little in sysvol, it needs to be
> >>> synced from a DC that holds all the GPO's.
> >>
> >> The wiki says, "You will now need to sync Sysvol to the new DC." I thought then
> >> sysvolreset was that. Is there a wiki/howto on how to sync Sysvol?
> > 
> > To "sync Sysvol to the new DC", can I just rsync from the current DC to the new
> > DC?
> > 
> > rsync -tvr /var/lib/samba/sysvol/ DC1://var/lib/samba/sysvol
> > 
> > or tar the old sysvol and untar on the new DC?
> > 
> > sysvol has ACLs and ATTRs that I don't think tar or rsync preserves, but I do 
> > have all the ACLs and ATTRs backed up and I could restore those with setattr,
> > setfacl ... OR is that what 'samba-tool ntacl sysvolreset' is supposed to do?
> >
> > OR - is there some offical samba tool to sync sysvol?
>
> There are a few ways of syncing sysvol, see here:
>
> https://wiki.samba.org/index.php/SysVol_replication_(DFS-R)
>
> Rowland

One of the recommended solutions was using rsync, similar to what I theorized.
I'll try that and post back.

Seeing as this is a critial aspect of setting up a 2nd DC, I think something on
this howto should be in https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory#Introduction.
Currently, there is just one line, "You will now need to sync Sysvol to the new DC",
but no actual instructions, nor any link to a howto.

Thanks --Mark