[Samba] How to change samba4 domaine name

[Jules Houantonon]

Hello dear samba users,

please is it possible to change samba4 domaine name ?

Did someone have a how to or can explain to acheive it ?

Thank you

[Klaus Hartnegg]

Post by Jules Houantonon
please is it possible to change samba4 domaine name ?
Did someone have a how to or can explain to acheive it ?

If it is Active Directory, then the recommendation from Microsoft
appears to be: create a new domain, set up trust between them, use ADMT
(Active Directory Migration Tool) to transfer everything from old to new
(in the one and only correct order, taking into account all caveats, and
after training in a test environment), finally shut down the old domain.

In samba this will probably fail on the step "set up trust", because
that is not(?) yet(?) fully(?) supported.

If anybody knows a shortcut, I am very interested to hear it.

[Jules Houantonon]

Hello all,

Mine is Active Directory domain.

I have already reinstall my server. It was fresh install. But of course I
am still following this topic.

Regards

Post by Jules Houantonon
please is it possible to change samba4 domaine name ?
Did someone have a how to or can explain to acheive it ?

If it is Active Directory, then the recommendation from Microsoft appears
to be: create a new domain, set up trust between them, use ADMT (Active
Directory Migration Tool) to transfer everything from old to new (in the
one and only correct order, taking into account all caveats, and after
training in a test environment), finally shut down the old domain.
In samba this will probably fail on the step "set up trust", because that
is not(?) yet(?) fully(?) supported.
If anybody knows a shortcut, I am very interested to hear it.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

[mathias dufresne]

I believe trust relationship are working since 4.3.0. This feature is not
yet full developed but I believe Samba can do transitive bi-directional
trusts only.

This is the most open trust and so this kind of trust relationship could be
used to do what the MS doc says.

I'm actually renaming my domain, we did use ldbsearch + awk/sed to rename
everything, ldbadd to import everything.
I believe there is no way to extract passwords from Samba AD and that could
be a show stopper. Here we have user passwords stored elsewhere and we can
synchronize them back.
We chose that way to re-test and improve our deployment strategy.

What I didn't tried was to re-use domain SID for my new domain. Re-using it
is not an issue if no connection exist between the new and the old domain
and re-using domain SID could be helpful to avoid changing AD user profile
on Windows clients (if and only if we can set/force objectSid when
re-injecting users, which is not sure).

Post by Jules Houantonon
Hello all,
Mine is Active Directory domain.
I have already reinstall my server. It was fresh install. But of course I
am still following this topic.
Regards

Post by Jules Houantonon
please is it possible to change samba4 domaine name ?
Did someone have a how to or can explain to acheive it ?

If it is Active Directory, then the recommendation from Microsoft appears
to be: create a new domain, set up trust between them, use ADMT (Active
Directory Migration Tool) to transfer everything from old to new (in the
one and only correct order, taking into account all caveats, and after
training in a test environment), finally shut down the old domain.
In samba this will probably fail on the step "set up trust", because that
is not(?) yet(?) fully(?) supported.
If anybody knows a shortcut, I am very interested to hear it.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba