[Samba] Need to upgrade very old samba: 4.6 AD to current release

[Perttu Aaltonen]

I did something very similar recently. Joined a new 4.17.6 Debian Bullseye DC to an old 4.1.9 domain running on Wheezy and transferred roles, then demoted the original old DC. I did it in a sandbox environment but everything seemed to go smoothly. I’ve yet to do it in a live environment but since it’s a VM I’m quite confident there are no hiccups.

YMMV as my environment doesn't use GPOs for example and only use AD for authentication. Just test throroughly your use cases.

-Perttu

> On 25. Mar 2023, at 23.35, xyz via samba <samba at lists.samba.org> wrote:
> 
> Thank you Rowland I will verify proposed path h in a lab environment.
> 
> The most important thing for me is that I have confirmation that it is
> better to add new controllers and transfer roles than to restore copies and
> update backups
> Cheers!
> 
> sob., 25 mar 2023 o 12:30 Rowland Penny via samba <samba at lists.samba.org>
> napisał(a):
> 
>> 
>> 
>> On 24/03/2023 19:54, xyz via samba wrote:
>>> Hello
>>> I need to upgrade Samba v.4.6 with AD enabled, which is built from
>> sources
>>> and installed on Ubuntu 12.04.
>> 
>> Ouch, they are both very old.
>> 
>>> 
>>> Trying .configure script in v.4.9 it complains: Samba AD DC and
>>> --enable-selftest requires lmdb 0.9.16 or later
>> 
>> Do really need selftest ?
>> 
>>> 
>>> In this state of the outdated system upgrade will fail due to missed
>>> dependencies.
>>> 
>>> I planned to upgrade OS before parallel to samba upgrade, but sadly repos
>>> of Ubuntu 12.04 and 14.04 has been removed.
>>> 
>>> Maybe I should install ubuntu 16.04 on the test machine,
>> 
>> I would go for 18.04, it is still just in support and this will get you
>> Samba 4.7.6 (if I remember correctly). Set up a new computer and join
>> this to the domain as a DC, then transfer the FSMO roles to it.
>> 
>> After that, I would abandon Ubuntu, install Debian buster and join this
>> as a DC (this will get you to 4.9.5), then either join bullseye using
>> backports, or upgrade in place to bullseye using backports, this will
>> get you to 4.17.6
>> You may be able to directly join a debian bullseye machine to your 18.04
>> DC, but probably better safe than sorry.
>> 
>>> restore the backup of the samba installation on it
>> 
>> If your backup was taken using the old Samba backup method, then I
>> wouldn't rely on it, there was no restore method for a start.
>> 
>> What ever way you go, I would test it in sandbox first.
>> 
>> Rowland
>> 
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba