RE: [Samba] Samba Domain Rename

[Sandeep Kumar]

Hi Michael/Frosty,



Thanks for your quick response



@ developers - I am using samba 4 domain on centos 6 but for some reason i
have to rename the domain



Is it possible?, if yes then can you please provide steps to accomplish this



Second, do i need to unjoin and rejoin the existing domain client machines



Looking forward to your quick response.......



Thanks,

Sandeep





*From:* Michael Wood [mailto:esio...@gmail.com]
*Sent:* 02 July 2013 14:22
*To:* Frostyfrog
*Cc:* Sandeep Kumar; sa...@lists.samba.org
*Subject:* Re: [Samba] Samba Domain Rename



If Sandeep is running Samba 4 as an Active Directory domain controller,
then I very much doubt that just editing the workgroup setting in smb.conf
will fix it. There are e.g. files in the samba private directory named
after the domain and also containing the name of the domain.

I don't know if there's a straightforward way of renaming the domain. I
suspect there isn't.

Sandeep, if you don't get a good answer here, you could try getting the
attention of one of the Samba developers on the IRC channel, perhaps.

On 2 July 2013 07:49, Frostyfrog <frost...@gmail.com> wrote:

I'm not sure which distro you are using (I use Archlinux), but these steps
should work if you have command line access (press the key surrounded in <>
when there is one, don't type the <> or the stuff inside):

1. Login to the server
2. type: vim /etc/samba/smb.conf<enter>
3. type: /workgroup =<enter>
(If that doesn't work, try it without the equals)
4. press the arrow keys until it is placed just after the equals
5. type c$
6. type in what you want the new domain name to be
7. press <esc>
8. type: :wq
9. restart samba

Disclaimer: These steps are not for those who have no idea what they are
doing (although it may seem that way), please proceed with caution.

~Frostyfrog
From a friendly web page developer.
^.^

On Mon, Jul 1, 2013 at 11:24 PM, Sandeep Kumar <sandee...@arborfs.com
>wrote:


> Hi Team,
>
> I am using samba 4 Domain in my production environment and everything is
> working fine but now for some reason I have to rename the domain
>
> Can you please help on this, I need to do this asap
>
> Waiting for your response………
>
> Many Thanks,
> Sandeep Kumar
> *Arbor Financial Systems Ltd*
> Direct: +91 172 400 6144
> Support: +44 (0) 203 070 9650
> www.arborfs.com


--
Michael Wood <esio...@gmail.com>

--


www.arborfs.com

This e-mail and any attachment are confidential and contain proprietary
information, some or all of which may be legally privileged.

It is intended solely for the use of the individual or entity to which it
is addressed. If you are not the intended recipient, please notify the
author immediately by telephone or by replying to this e-mail, and then
delete all copies of the e-mail on your system. If you are not the
intended recipient, you must not use, disclose, distribute, copy, print or
rely on this e-mail.

Whilst we have taken reasonable precautions to ensure that this e-mail and
any attachment has been checked for viruses, we cannot guarantee that they
are virus free and we cannot accept liability for any damage sustained as a
result of software viruses. We would advise that you carry out your own
virus checks, especially before opening an attachment.

[Ricky Nance]

Like Michael said, samba 4 as an AD DC would probably not be happy if you
just change the 'workgroup = ' line in your smb.conf (as a matter of fact,
that line shouldn't exist in a AD DC setup in my opinion) the domain is
more than likely embedded very deep inside of the LDB's, and I would
strongly recommend against changing those, however, with sufficient backups
and lots of luck you might be successful in changing it (look into
ldbsearch and ldbedit if you are really REALLY brave). I think even
changing every instance in the LDB's however will still not work, as
during provision the machine joins itself to the domain (yes it joins
itself to itself if I recall right). I would try to avoid this at all
costs, but if you must do it, starting over may be your best option.

Just my thoughts,
Ricky

[Denis Cardon]

Hi Sandeep,

> Changing a domain name, even in an all-Microsoft Windows server
> environment, is strongly discouraged, at least on the user mailing
> lists I am on. Better would be to use the domain migration tools, and
> migrate to a newly named domain.

I had recently to migrate a windows 2003 domaine from a short dns domain
name media1 to standard dns name media1.local before migrating to a
samba4 domain. There are actually some microsoft tool to do the
migration, but it is far from trivial. I don't know if there are
anything in samba4 to do the same thing though, and probably the method
outlined by Michael might still be the best one.

Cheers,

Denis

>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions: https://lists.samba.org/mailman/options/samba


--
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil-it-systems.fr

[Sandeep Kumar]

Hi Ricky,



Thanks for sharing your opinion



@samba Technical – can you please give me a final Yes or No on this because
no one knows more than you guys



Thanks,

Sandeep



*From:* Ricky Nance [mailto:ricky...@gmail.com]
*Sent:* 02 July 2013 20:37
*To:* Sandeep Kumar
*Cc:* Frostyfrog; Michael Wood; Samba Technical; sa...@lists.samba.org

*Subject:* Re: [Samba] Samba Domain Rename

Like Michael said, samba 4 as an AD DC would probably not be happy if you
just change the 'workgroup = ' line in your smb.conf (as a matter of fact,
that line shouldn't exist in a AD DC setup in my opinion) the domain is
more than likely embedded very deep inside of the LDB's, and I would
strongly recommend against changing those, however, with sufficient backups
and lots of luck you might be successful in changing it (look into
ldbsearch and ldbedit if you are really REALLY brave). I think even
changing every instance in the LDB's however will still not work, as
during provision the machine joins itself to the domain (yes it joins
itself to itself if I recall right). I would try to avoid this at all
costs, but if you must do it, starting over may be your best option.



Just my thoughts,

Ricky

--

[Andrew Bartlett]

On Tue, 2013-07-02 at 20:07 +0200, Denis Cardon wrote:
> Hi Sandeep,
>
> > Changing a domain name, even in an all-Microsoft Windows server
> > environment, is strongly discouraged, at least on the user mailing
> > lists I am on. Better would be to use the domain migration tools, and
> > migrate to a newly named domain.
>
> I had recently to migrate a windows 2003 domaine from a short dns domain
> name media1 to standard dns name media1.local before migrating to a
> samba4 domain. There are actually some microsoft tool to do the
> migration, but it is far from trivial. I don't know if there are
> anything in samba4 to do the same thing though, and probably the method
> outlined by Michael might still be the best one.

Indeed, renaming a domain breaks all the base assumptions in AD.

Samba 4.0 as an AD DC has no code to support this, if it works with the
Microsoft tool that was used in your situation it would be a miracle,
but just occasionally we find this stuff just happens to work because
the hard work is in the client tool, not the DC.

Andrew Bartlett

--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org

[Michael Leone]

Changing a domain name, even in an all-Microsoft Windows server
environment, is strongly discouraged, at least on the user mailing
lists I am on. Better would be to use the domain migration tools, and
migrate to a newly named domain.

On Tue, Jul 2, 2013 at 11:07 AM, Ricky Nance <ricky...@gmail.com> wrote:

> Like Michael said, samba 4 as an AD DC would probably not be happy if you
> just change the 'workgroup = ' line in your smb.conf (as a matter of fact,
> that line shouldn't exist in a AD DC setup in my opinion) the domain is
> more than likely embedded very deep inside of the LDB's, and I would
> strongly recommend against changing those, however, with sufficient backups
> and lots of luck you might be successful in changing it (look into
> ldbsearch and ldbedit if you are really REALLY brave). I think even
> changing every instance in the LDB's however will still not work, as
> during provision the machine joins itself to the domain (yes it joins
> itself to itself if I recall right). I would try to avoid this at all
> costs, but if you must do it, starting over may be your best option.
>
> Just my thoughts,
> Ricky
> --

[Matthieu Patou]

On 07/03/2013 06:17 AM, Sandeep Kumar wrote:
> Hi Ricky,
>
>
>
> Thanks for sharing your opinion
>
>
>
> @samba Technical – can you please give me a final Yes or No on this because
> no one knows more than you guys

The final response is we don't know. Use the Microsoft migration tool on
a clone of your environment and see what breaks.
If you are willing to spend sometime on it we might be able to get it
working after a couple of try/fail cycle.

Matthieu.

>
>
> Thanks,
>
> Sandeep
>
>
>
> *From:* Ricky Nance [mailto:ricky...@gmail.com]
> *Sent:* 02 July 2013 20:37
> *To:* Sandeep Kumar
> *Cc:* Frostyfrog; Michael Wood; Samba Technical; sa...@lists.samba.org
> *Subject:* Re: [Samba] Samba Domain Rename
>
>
>

> Like Michael said, samba 4 as an AD DC would probably not be happy if you
> just change the 'workgroup = ' line in your smb.conf (as a matter of fact,
> that line shouldn't exist in a AD DC setup in my opinion) the domain is
> more than likely embedded very deep inside of the LDB's, and I would
> strongly recommend against changing those, however, with sufficient backups
> and lots of luck you might be successful in changing it (look into
> ldbsearch and ldbedit if you are really REALLY brave). I think even
> changing every instance in the LDB's however will still not work, as
> during provision the machine joins itself to the domain (yes it joins
> itself to itself if I recall right). I would try to avoid this at all
> costs, but if you must do it, starting over may be your best option.
>
>
>
> Just my thoughts,
>
> Ricky
>


--

Matthieu Patou
Samba Team
http://samba.org