ray klassen <julius_ahenobarbus <at> yahoo.co.uk>
2014-10-29 22:13:50 GMT
First of all let me congratulate the wiki writers. The step by step classic-upgrade guide is very helpful.
Here are my notes on the various steps of the upgrade.
-- created a vanilla debian wheezy install, installed all the prerequisites as well as "devscripts,"
--compiled, installed samba using samba-4.1.2
-- created symbolic links from /usr/local/samba/bin to /usr/local/bin and /usr/local/samba/sbin to
/usr/local/sbin because those directories are in $PATH and from /usr/local/samba/etc/ to /etc/samba
and from /usr/local/samba/var/log.* to /var/log/samba/* so that those files will be where I expect.
-- installed slapd, copied over the current ldap files, configured slapd to load them-- copied smb.conf
and various *db files to a directory-- downloaded the debian bind9 source deb, added
--with-dlopen=yes to EXTRA_FEATURES= in the debian/rules file
--ran debuild -us -uc from bind9 source dir -- created debs with dlopen support (this is what devscripts
--ran samba-tool doman classicupgrade... with --dns-backend=BIND_DLZ etc.--several colisions had to
be edited out of the ldap directory before the upgrade would complete -- a trusted
domain account had to be removed-- an early phase of the classicupgrade script warned me that it would not
be imported, but a later phase choked apparently because it hadn't been imported. Bug?
-- two groups had different groupnames but the same DisplayName. that had to be changed.
-- played around with dns. Found that windows boxes really like to talk to the domain controller itself
and not a slave.
-- have been busy reconnecting all the services that depended on ldap to active directory, learning kerberos
Some things did not work as expected. 1) all the computers did not automatically join the new domain. Some
did and some did not. The computers that were at the head office presumably in the same broadcast domain all
joined automatically, once I configured the domain controller as DNS server assigned by DHCP. The
computers at our satellite offices (approximately 30) did not. This maybe because I had LMHOSTS files on
all those machines, except that after delete and reboot, (DNS still pointed at the DC -- I didn't forget)