Koozali.org: home of the SME Server

Samba Domain Controller from SME9 to SME10

Offline yythoss

  • *
  • 532
  • +0/-0
    • http://www.hylafax-client.de
Samba Domain Controller from SME9 to SME10
« on: July 07, 2022, 04:31:18 PM »
Is there a howto to migrate a samba domain controller from a SME 9.2 to a SME10. It would be important that the Windows clients do not have to be join to the domain again. With Affa from SME9 to SME9 it works wonderfully.
But unfortunately that doesn't work from SME 9.2 to SME 10.

THX

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: Samba Domain Controller from SME9 to SME10
« Reply #1 on: July 07, 2022, 05:30:28 PM »
Standard upgrade path is as per the wiki.

https://wiki.koozali.org/SME_Server:10.0

I suggest you do some serious testing first, and read about SMB1/SMB2/SMB3 as well. There is lots here.

Affa is not recommended for upgrades. Some have used it, but there are no guarantees.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline yythoss

  • *
  • 532
  • +0/-0
    • http://www.hylafax-client.de
Re: Samba Domain Controller from SME9 to SME10
« Reply #2 on: July 07, 2022, 05:33:57 PM »
THX for this link, but I know that.
I want to move the SME9 to a new Hardware with SME10 is installed.

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: Samba Domain Controller from SME9 to SME10
« Reply #3 on: July 07, 2022, 05:45:47 PM »
I want to move the SME9 to a new Hardware with SME10 is installed.

Sorry - please explain a little more clearly exactly what you trying to do as it is not clear to me.

You have an SME v10 that is already installed. Are you using it?

Are you planning to delete all the data and start again, or are you wanting to merge it with an existing SME v9?


...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline yythoss

  • *
  • 532
  • +0/-0
    • http://www.hylafax-client.de
Re: Samba Domain Controller from SME9 to SME10
« Reply #4 on: July 07, 2022, 05:53:28 PM »
There is a SME9 as a productive server and is used as a domain controller for the Windows 10 Clients.
There is now a new hardware with a freshly installed SME10. I would now like to move the domain controller from the SME9 to the SME10 and then switch off the SME9.
However, it should be the case that the Windows clients can continue to logon to the SME10 without having to add all Windows clients to the domain again. The rest of the data is no problem to move to the SME10.

Offline yythoss

  • *
  • 532
  • +0/-0
    • http://www.hylafax-client.de
Re: Samba Domain Controller from SME9 to SME10
« Reply #5 on: July 07, 2022, 06:06:40 PM »
My Idea was:

1.) Create all Users on the SME10 with the same UserID from SME9
2.) Copy /etc/samba/secrets.tdb and /etc/samba/smbpasswd form SME9 to SME10
3.) Restart Samba on SME10
« Last Edit: July 07, 2022, 06:17:06 PM by yythoss »

Offline Jean-Philippe Pialasse

  • *
  • 2,747
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Samba Domain Controller from SME9 to SME10
« Reply #6 on: July 07, 2022, 07:15:47 PM »
aren’t they part of core backup?

Offline yythoss

  • *
  • 532
  • +0/-0
    • http://www.hylafax-client.de
Re: Samba Domain Controller from SME9 to SME10
« Reply #7 on: July 07, 2022, 07:42:41 PM »
No

Offline Jean-Philippe Pialasse

  • *
  • 2,747
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Samba Domain Controller from SME9 to SME10
« Reply #8 on: July 07, 2022, 07:57:42 PM »
well, code says : yes

Code: [Select]
my @backup =  (
        'home/e-smith',
        'etc/e-smith/templates-custom',
        'etc/e-smith/templates-user-custom',
        'etc/ssh',
        'root',
        'etc/sudoers',
        'etc/passwd',
        'etc/shadow',
        'etc/group',
        'etc/gshadow',
        'etc/samba/secrets.tdb',
        'etc/samba/smbpasswd',
        'etc/backup-data.d',
    );

Offline bunkobugsy

  • *
  • 274
  • +4/-0
Re: Samba Domain Controller from SME9 to SME10
« Reply #9 on: July 07, 2022, 08:31:49 PM »
https://wiki.koozali.org/Migratehelper out of the box, no domain memberships or passwords lost, working in production :)

/etc/samba/secrets.tdb
/etc/samba/smbpasswd
/etc/samba/schannel_store.tdb
/var/lib/samba/group_mapping.tdb
/var/lib/samba/account_policy.tdb

Offline yythoss

  • *
  • 532
  • +0/-0
    • http://www.hylafax-client.de
Re: Samba Domain Controller from SME9 to SME10
« Reply #10 on: July 08, 2022, 11:03:32 AM »
That's what I was looking for, thank you!

Offline Jean-Philippe Pialasse

  • *
  • 2,747
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Samba Domain Controller from SME9 to SME10
« Reply #11 on: July 08, 2022, 06:13:29 PM »
both migratehelper and core console usb backup will backup those samba files per default.

be carrefull for migratehelper it is more versatil, helps backuping sme9 contribs and also allow not to backup the huge folders of data, so you can restore the configuration, and latter sync the users and ibays data.

Offline yythoss

  • *
  • 532
  • +0/-0
    • http://www.hylafax-client.de
Re: Samba Domain Controller from SME9 to SME10
« Reply #12 on: July 08, 2022, 06:30:46 PM »
Yes, but files that are not compatible with SME10 are also backed up. That's why I don't want to use that.
Files from ibay are easy to back up with tar. My problem was only Samba Domain Controller.

Offline gzartman

  • *
  • 305
  • +0/-0
    • LEI Engineering & Surveying
Re: Samba Domain Controller from SME9 to SME10
« Reply #13 on: July 08, 2022, 11:24:01 PM »
Is there a howto to migrate a samba domain controller from a SME 9.2 to a SME10. It would be important that the Windows clients do not have to be join to the domain again. With Affa from SME9 to SME9 it works wonderfully.
But unfortunately that doesn't work from SME 9.2 to SME 10.

THX

This is typically not even recommended for Windows Server.  Most Windows Server admins will tell you to do a fresh install and avoid an in-place upgrade.  With a Windows Domain Controller, you can copy the active directory to another Domain Controller, do the upgrade on the main box, then copy the active directory back over to the main server.  This isn't an option with SME 10.

As painful as it is, you really are much better off re-joining the workstations to SME 10 if you are moving to SME 10. Their are some tricks you can do with Samba to copy over machine accounts to a new SME install, but I wouldn't recommend most people try it.  It's far too easy to make a hell of a mess.
« Last Edit: July 08, 2022, 11:30:23 PM by gzartman »
----
Greg J. Zartman
LEI Engineering & Surveying

SME user and community member since 2000.

Offline Jean-Philippe Pialasse

  • *
  • 2,747
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Samba Domain Controller from SME9 to SME10
« Reply #14 on: July 09, 2022, 12:39:58 AM »
Yes, but files that are not compatible with SME10 are also backed up.

can you elaborate this statement ?