TASK [fflch.sambadc : avoid smb.conf testparm problem soft - root] *******************************************************
[WARNING]: The value 65536 (type int) in a string field was converted to '65536' (type string). If this does not look
like what you expect, quote the entire value to ensure it does not change.

https://wiki.samba.org/index.php/Demoting_a_Samba_AD_DC

You cannot demote an offline remote DC from a DC that runs Samba 4.4 or earlier. Update to Samba 4.4.0 or later before you continue.

like: https://github.com/yamb00/ansible-role-samba/blob/master/templates/smb.conf.j2

[global]
{% for key,value in samba.global.iteritems() %}
{{key|replace("_" , " ")}} = {{value}}
{% endfor %}

{% for item in samba.shares %}
[{{item.name}}]
{% for key,value in item.iteritems() %}
{{key|replace("_", " ")}} = {{value}}
{% endfor %}
{% endfor %}

remount-ro,acl,user_xattr,barrier=1

If the other DCs are Samba DCs and were provisioned with --use-rfc2307, you Should add --option='idmap_ldb:use rfc2307 = yes' to the join command

#Disable password expiration for the Administrator account.
samba-tool user setexpiry Administrator --noexpiry

#Show domain level password options.
samba-tool domain passwordsettings show

#Disable password complexity at the domain level.
samba-tool domain passwordsettings set --complexity=off

#Disable password history at the domain level.
samba-tool domain passwordsettings set --history-length=0

#Disable password min-age at the domain level.
samba-tool domain passwordsettings set --min-pwd-age=0

#Disable password max-age at the domain level.
samba-tool domain passwordsettings set --max-pwd-age=0

#Disable minimum password length at the domain level.
samba-tool domain passwordsettings set --min-pwd-length=0

Corrigir para sambadc_admin_password

Exemplo de rotina para backup online:

samba-tool domain backup online --targetdir=/home/vagrant/bkponline --server=vagrantsambadcdebian11.smbdomain.local.br -UAdministrator --password='SuperSenh@1'

Exemplo de rotina para backup offilne:

samba-tool domain backup offline --targetdir=/home/vagrant/bkpoffline

backup versões antigas
https://wiki.samba.org/index.php/Using_the_samba_backup_script

back versões novas
https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC

Alguns problemas

• idmap.ldb and sysvol devem ser copiados do DC antigo

Comando para arrumar a sysvol:

samba-tool ntacl sysvolcheck
samba-tool ntacl  sysvolreset

VErificando se há id duplciado no idmap.ldb:

ldbsearch -H /var/lib/samba/private/idmap.ldb | grep xidNumber | uniq -d

Links:

• https://groups.google.com/g/linux.samba/c/kOdiWpy6hZ4

fflch.sambadc : Desabilita systemd-resolved, necessário em Ubuntu 18.04