[Samba] Need to upgrade very old samba: 4.6 AD to current release

[Andrew Bartlett]

Our intention is that this is all you need to do, join the new DC and
transfer roles, even over the big version gap.  

I'm glad to hear it worked for you with 4.17.6 as this includes a fix
for https://bugzilla.samba.org/show_bug.cgi?id=15189 specifically aimed
at providing a workaround for this kind of upgrade.

Andrew Bartlett

On Sun, 2023-03-26 at 00:02 +0200, Perttu Aaltonen via samba wrote:
> I did something very similar recently. Joined a new 4.17.6 Debian Bullseye DC to an old 4.1.9 domain running on Wheezy and transferred roles, then demoted the original old DC. I did it in a sandbox environment but everything seemed to go smoothly. I’ve yet to do it in a live environment but since it’s a VM I’m quite confident there are no hiccups.
> 
> YMMV as my environment doesn't use GPOs for example and only use AD for authentication. Just test throroughly your use cases.
> 
> -Perttu
> 
> > On 25. Mar 2023, at 23.35, xyz via samba <samba at lists.samba.org> wrote:
> > 
> > Thank you Rowland I will verify proposed path h in a lab environment.
> > 
> > The most important thing for me is that I have confirmation that it is
> > better to add new controllers and transfer roles than to restore copies and
> > update backups
> > Cheers!
> > 
> > sob., 25 mar 2023 o 12:30 Rowland Penny via samba <samba at lists.samba.org>
> > napisał(a):
> > 
> > > 
> > > 
> > > On 24/03/2023 19:54, xyz via samba wrote:
> > > > Hello
> > > > I need to upgrade Samba v.4.6 with AD enabled, which is built from
> > > sources
> > > > and installed on Ubuntu 12.04.
> > > 
> > > Ouch, they are both very old.
> > > 
> > > > 
> > > > Trying .configure script in v.4.9 it complains: Samba AD DC and
> > > > --enable-selftest requires lmdb 0.9.16 or later
> > > 
> > > Do really need selftest ?
> > > 
> > > > 
> > > > In this state of the outdated system upgrade will fail due to missed
> > > > dependencies.
> > > > 
> > > > I planned to upgrade OS before parallel to samba upgrade, but sadly repos
> > > > of Ubuntu 12.04 and 14.04 has been removed.
> > > > 
> > > > Maybe I should install ubuntu 16.04 on the test machine,
> > > 
> > > I would go for 18.04, it is still just in support and this will get you
> > > Samba 4.7.6 (if I remember correctly). Set up a new computer and join
> > > this to the domain as a DC, then transfer the FSMO roles to it.
> > > 
> > > After that, I would abandon Ubuntu, install Debian buster and join this
> > > as a DC (this will get you to 4.9.5), then either join bullseye using
> > > backports, or upgrade in place to bullseye using backports, this will
> > > get you to 4.17.6
> > > You may be able to directly join a debian bullseye machine to your 18.04
> > > DC, but probably better safe than sorry.
> > > 
> > > > restore the backup of the samba installation on it
> > > 
> > > If your backup was taken using the old Samba backup method, then I
> > > wouldn't rely on it, there was no restore method for a start.
> > > 
> > > What ever way you go, I would test it in sandbox first.
> > > 
> > > Rowland
> > > 
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions:  https://lists.samba.org/mailman/options/samba
> > > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> 
> 

-- 
Andrew Bartlett (he/him)        https://samba.org/~abartlet/
Samba Team Member (since 2001)  https://samba.org
Samba Developer, Catalyst IT    https://catalyst.net.nz/services/samba