Problem Finish Migration to NS8

Denis_Pollini · August 28, 2024, 6:30am

Hi all
I have a problem with “finish migration” from NS7 to NS8, i click on sync data without errors, now click on “finish migration” button and is working from 30 minutes more or less.
This is the screenshoot:

and this one is the log of “samba1”

UPDATE:
In the meantime i check put in “follow mode” the ns8-migration.log and i see this list scrolled automacally, what he’s doing check the file?

Thanks

nzsolt · August 28, 2024, 7:22am

Hi!

I think it’s a log of the last rsync operation when it copied extended attributes of shared files.
Last weekend we also tried to migrate our ns7 server to ns8. but this feature took forever… Our data size is 15TB. We stopped the rsync process after 2 days because it was just at the beginning of the process. According to our calculations, this would have taken more than 2-3 weeks. We modified this line on the ns7 server
/usr/share/nethesis/nethserver-ns8-migration/apps/account-provider/ad/migrate

rsync_forced -i --recursive --times --links --acls --owner --group --perms --xattrs --delete /var/lib/nethserver/ibay/ “${RSYNC_ENDPOINT}”/shares/

and deleted the “–xattrs” parameter.
By running the migration again, it takes only 20 minutes to copy the acl rights.

Shouldn’t this parameter be automatically removed in case of a large size?

Denis_Pollini · August 28, 2024, 7:36am

Hi
Im my case i have only 1TB of data.
UPDATE:
In case something goes wrong what is the command to re-enable the service on NS7?
Thanks

mrmarkuz · August 28, 2024, 10:55am

Here is the procedure to rollback migration:

https://docs.nethserver.org/projects/nethserver-devel/en/latest/nethserver-ns8-migration.html#post-migration-step-back

Denis_Pollini · August 28, 2024, 12:03pm

thanks @mrmarkuz

Anyway has finished 10 minutes ago with success

Denis_Pollini · August 30, 2024, 10:14am

Hi guys

it was agreed that he cannot modify the files, he can only modify the created ones.

I tried to change the acl from the ns8 interface but the problem remains is there a way to change the permissions with chmod -R by entering the samba container, or is it not safe as a method?

Andy_Wismer · August 30, 2024, 11:45am

Hi @Denis_Pollini

chmod is not the right tool to change ACL permissinos.
Better use a Windows Tool, or facls…

My 2 cents
Andy

Denis_Pollini · August 30, 2024, 11:48am

Yes i try to change from a W10 client has join the domain but when he start to edit permission on the share at the end i receive this alert:

I translate basically he says “Impossibile save the changes. Access Denied.”

Andy_Wismer · August 30, 2024, 11:50am

You first need to set the ACL permissions that Domain Admins have full access…
Then set the detail permissions!

My 2 cents
Andy

Denis_Pollini · August 30, 2024, 11:53am

I think is already how you did:

I see that the owner is not “admin” user but “administrator”, now i login with administrator user and i’m changing the persimission let see if it works with this user.

Andy_Wismer · August 30, 2024, 12:00pm

I never use administrator on NS7 nor on NS8, I always only use admin.
Administrator is deactivated!

My 2 cents
Andy

Denis_Pollini · August 30, 2024, 12:01pm

Me Too i never use it, but i don’t know why the owner of that share folder is “Administrator” and not “admin”
IDK.

ansh · September 10, 2024, 11:19am

I have the same problem. After pressing the “Finish migration” button, there is a constant loading…

.d..t...... private/smbd.tmp/
<f..t...... private/smbd.tmp/bad_password.tdb.export
.d..t...... winbindd_privileged/
<f..T...... accounts.json
<f..T...... nbalias.txt
[{"error": "domain_not_found", "field": "domain", "parameter": "domain", "value": "ad.xxx.local"}]receiving file list ... done
dr-xr-xr-x              6 2023/09/28 14:18:46 .

sent 20 bytes  received 30 bytes  100.00 bytes/sec
total size is 0  speedup is 0.00

ansh · September 10, 2024, 11:49am

Can I manually migrate AD Samba from NS7 to NS8?

ansh · September 10, 2024, 1:25pm

After canceling the “abort migration” sync, I turned it on again and selected the VPN IP (10.5.4.1) NS8 and AD appeared on NS8 with IP 10.5.4.1
How do I change to the local internal IP? Does NS8 also use docker for AD? Should the AD IP on NS8 be different from the local IP (192.168.0.170) of NS8?

[root@ldap admin]# api-cli run module/samba1/set-ipaddress --data '{"ipaddress":"192.168.0.27"}'
Warning: using user "cluster" credentials from the environment
TaskSubmissionCheckFailed: Client "module/samba1" was not found

nzsolt · September 11, 2024, 11:17am

You have samba5 instead of samba1.