[Samba] Need to upgrade very old samba: 4.6 AD to current release

[Perttu Aaltonen]

Thanks Andrew,

That fix probably helped a lot. Looks like once in a while waiting just a bit longer might actually pay off, but now that environment is on track to receive regular updates.

-Perttu

> On 26. Mar 2023, at 5.08, Andrew Bartlett <abartlet at samba.org> wrote:
> 
> Our intention is that this is all you need to do, join the new DC and
> transfer roles, even over the big version gap.  
> 
> I'm glad to hear it worked for you with 4.17.6 as this includes a fix
> for https://bugzilla.samba.org/show_bug.cgi?id=15189 <https://bugzilla.samba.org/show_bug.cgi?id=15189> specifically aimed
> at providing a workaround for this kind of upgrade.
> 
> Andrew Bartlett
> 
> On Sun, 2023-03-26 at 00:02 +0200, Perttu Aaltonen via samba wrote:
>> I did something very similar recently. Joined a new 4.17.6 Debian Bullseye DC to an old 4.1.9 domain running on Wheezy and transferred roles, then demoted the original old DC. I did it in a sandbox environment but everything seemed to go smoothly. I’ve yet to do it in a live environment but since it’s a VM I’m quite confident there are no hiccups.
>> 
>> YMMV as my environment doesn't use GPOs for example and only use AD for authentication. Just test throroughly your use cases.
>> 
>> -Perttu
>> 
>>> On 25. Mar 2023, at 23.35, xyz via samba <samba at lists.samba.org> wrote:
>>> 
>>> Thank you Rowland I will verify proposed path h in a lab environment.
>>> 
>>> The most important thing for me is that I have confirmation that it is
>>> better to add new controllers and transfer roles than to restore copies and
>>> update backups
>>> Cheers!
>>> 
>>> sob., 25 mar 2023 o 12:30 Rowland Penny via samba <samba at lists.samba.org>
>>> napisał(a):
>>> 
>>>> 
>>>> 
>>>> On 24/03/2023 19:54, xyz via samba wrote:
>>>>> Hello
>>>>> I need to upgrade Samba v.4.6 with AD enabled, which is built from
>>>> sources
>>>>> and installed on Ubuntu 12.04.
>>>> 
>>>> Ouch, they are both very old.
>>>> 
>>>>> 
>>>>> Trying .configure script in v.4.9 it complains: Samba AD DC and
>>>>> --enable-selftest requires lmdb 0.9.16 or later
>>>> 
>>>> Do really need selftest ?
>>>> 
>>>>> 
>>>>> In this state of the outdated system upgrade will fail due to missed
>>>>> dependencies.
>>>>> 
>>>>> I planned to upgrade OS before parallel to samba upgrade, but sadly repos
>>>>> of Ubuntu 12.04 and 14.04 has been removed.
>>>>> 
>>>>> Maybe I should install ubuntu 16.04 on the test machine,
>>>> 
>>>> I would go for 18.04, it is still just in support and this will get you
>>>> Samba 4.7.6 (if I remember correctly). Set up a new computer and join
>>>> this to the domain as a DC, then transfer the FSMO roles to it.
>>>> 
>>>> After that, I would abandon Ubuntu, install Debian buster and join this
>>>> as a DC (this will get you to 4.9.5), then either join bullseye using
>>>> backports, or upgrade in place to bullseye using backports, this will
>>>> get you to 4.17.6
>>>> You may be able to directly join a debian bullseye machine to your 18.04
>>>> DC, but probably better safe than sorry.
>>>> 
>>>>> restore the backup of the samba installation on it
>>>> 
>>>> If your backup was taken using the old Samba backup method, then I
>>>> wouldn't rely on it, there was no restore method for a start.
>>>> 
>>>> What ever way you go, I would test it in sandbox first.
>>>> 
>>>> Rowland
>>>> 
>>>> --
>>>> To unsubscribe from this list go to the following URL and read the
>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>> 
>>> -- 
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/options/samba
>> 
>> 
> 
> -- 
> Andrew Bartlett (he/him)        https://samba.org/~abartlet/ <https://samba.org/~abartlet/>
> Samba Team Member (since 2001)  https://samba.org <https://samba.org/>
> Samba Developer, Catalyst IT    https://catalyst.net.nz/services/samba <https://catalyst.net.nz/services/samba>