Hi There,

We have recently upgraded two of our customer directories from 4.1.17 to 4.5.8 with that i also wanted to change the DNS FSMO roles since those were still on the server that was first installed in their environment instead on the dedicated server we introduced later. Now i've already done this with a different customers directory that we've put on 4.4.6 without a problem but with 4.5.8 i seem to be unable to do this with both the customers i'm trying this with. See the error below.

root@gc:~# samba-tool fsmo show
SchemaMasterRole owner: CN=NTDS Settings,CN=GC,CN=Servers,CN=Servicebureau,CN=Sites,CN=Configuration,DC=customer
InfrastructureMasterRole owner: CN=NTDS Settings,CN=GC,CN=Servers,CN=Servicebureau,CN=Sites,CN=Configuration,DC=customer
RidAllocationMasterRole owner: CN=NTDS Settings,CN=GC,CN=Servers,CN=Servicebureau,CN=Sites,CN=Configuration,DC=customer
PdcEmulationMasterRole owner: CN=NTDS Settings,CN=GC,CN=Servers,CN=Servicebureau,CN=Sites,CN=Configuration,DC=customer
DomainNamingMasterRole owner: CN=NTDS Settings,CN=GC,CN=Servers,CN=Servicebureau,CN=Sites,CN=Configuration,DC=customer
DomainDnsZonesMasterRole owner: CN=NTDS Settings,CN=AD-zoetermeer,CN=Servers,CN=Zoetermeer,CN=Sites,CN=Configuration,DC=customer
ForestDnsZonesMasterRole owner: CN=NTDS Settings,CN=AD-zoetermeer,CN=Servers,CN=Zoetermeer,CN=Sites,CN=Configuration,DC=customer
root@gc:~# samba-tool fsmo transfer --role=all -U domadm
This DC already has the 'rid' FSMO role
This DC already has the 'pdc' FSMO role
This DC already has the 'naming' FSMO role
This DC already has the 'infrastructure' FSMO role
This DC already has the 'schema' FSMO role
lpcfg_load: refreshing parameters from /etc/samba/smb.conf
Password for [CUSTOMER\domadm]:
ERROR: Failed to delete role 'domaindns': LDAP error 16 LDAP_NO_SUCH_ATTRIBUTE -  <attribute 'fSMORoleOwner': no matching attribute value while deleting attribute on 'CN=Infrastructure,DC=DomainDnsZones,DC=customer'> <>
root@gc:~# samba -V
Version 4.5.8-Debian

The domadm user is the original Administrator account we always immediately rename after a deployment. I've changed the domain name to customer for our customers discretion. I've checked to values myself in the database but everything seems to be just fine there, meaning the fSMORoleOwner is correct in the database. samba-tool dbcheck doesn't find any issues regarding this.

Please help since the server currently holding this role has to be decommissioned soon. At the other customer site the server will stay.

Regards,
Peter Gerritsen