[Samba] Migrate File Server MS for Samba

[Ricardo Pardim Claus]

Dear,We are in MS migration phase to Samba 4.Besides replacing the AD MS by Samba 4, we must also migrate the file server MS to Samba 4.
I have some doubts and I ask the opinion of you:
  1 - Is there any way to migrate MS folder permissions for Samba 4?  2 - We will need a secondary domain control. Based on best practices in this Samba 4 is that the file server, we can use it as a secondary DC? Or is it better to leave the file server only as a domain member, and create server with Samba to be the secondary DC?
Thank you!

[Ricardo Pardim Claus]

Dear Marc,
Thanks for initial contact.
The file server that need to migrate is a Windows 2012 R2. He's just a domain member.
Being Win 2012, I can face any problems in the migration?

Once the shares are ready, I plan to use Robocopy to copy the files and also the permissions of users and groups from Windows to Samba.


De: Marc Muehlfeld <***@samba.org>
Para: Ricardo Pardim Claus <***@yahoo.com.br>; "***@lists.samba.org" <***@lists.samba.org>
Enviadas: Segunda-feira, 18 de Julho de 2016 13:27
Assunto: Re: [Samba] Migrate File Server MS for Samba

Hello Ricardo,

if you want to migrate your whole environment to Samba without starting
from scratch, you have to go the following way:

- Check that you're not running a DC later than 2008R2 (we currently do
not support a later schema).
- Join a new Samba DC to the domain
- Set up and join a new Samba Domain Member to the domain
- Copy all files, verify ACLs, etc.
- Testing, testing, testing!
- Demote the old MS DC
- Remove the old MS file server from the domain

Post by Ricardo Pardim Claus
  1 - Is there any way to migrate MS folder permissions for Samba 4?

You can try using robocopy. It work's as workaround to mirror the Sysvol
content from Samba to Windows, so it should work for your case, too.
https://wiki.samba.org/index.php/Robocopy_based_SysVol_replication_workaround

Post by Ricardo Pardim Claus
  2 - We will need a secondary domain control. Based on best practices
in this Samba 4 is that the file server, we can use it as a
secondary DC? Or is it better to leave the file server only
as a domain member, and create server with Samba to
be the secondary DC?

It's no problem to use the DC as file server as well. However I would
make it conditional on your environment.

You may encounter some different behaviour: For example in the DC code,
the Windows ACL support enabled (hard coded).


Regards,
Marc

[Ricardo Pardim Claus]

Dear Marc,Actually the file server is just a domain member. Therefore, I believe that is more peaceful to migrate.
Here we have 2 servers Windows 2012 R2. A file server and a DC.Both servers will be migrated to Samba.We are documenting and preparing to migrate them.Once the migration is ok, I'll post the comments here.Thank you!Greetings!
De: Marc Muehlfeld <***@samba.org>
Para: Ricardo Pardim Claus <***@yahoo.com.br>; "***@lists.samba.org" <***@lists.samba.org>
Enviadas: Terça-feira, 19 de Julho de 2016 2:10
Assunto: Re: [Samba] Migrate File Server MS for Samba

Hello Ricardo,

Post by Ricardo Pardim Claus
The file server that need to migrate is a
Windows 2012 R2. He's just a domain member.
Being Win 2012, I can face any problems in the migration?

Not if it's just a normal domain member. However you wrote in your first
mail "replacing the AD MS by Samba 4". This sounds like you're having a
Windows DC. The directory schema of 2012 and later is currently not
supported and thus the replication will fail.


Regards,
Marc