Is it correct to use samba-tool drs options to temporarily disable replication on a DC?

Anton Shevtsov via samba <[email protected]> Thu, 14 May 2026 15:23:43 +0500
Newsgroups gmane.network.samba.general
Organization BaseALT
Message-ID <[email protected]>
Hi,

Is it correct and safe to temporarily disable replication on a specific 
domain controller while keeping it fully operational (able to serve 
authentication requests, etc.) using the following commands?

[root@dc ~]# samba-tool drs options 192.168.150.10 -d 5 
--dsa-option=+DISABLE_OUTBOUND_REPL -UAdministrator
[root@dc ~]# samba-tool drs options 192.168.150.10 -d 5 
--dsa-option=+DISABLE_INBOUND_REPL -UAdministrator
After performing the necessary actions on that DC, I would re-enable 
replication with:

[root@dc ~]# samba-tool drs options 192.168.150.10 -d 5 
--dsa-option=-DISABLE_OUTBOUND_REPL -UAdministrator
[root@dc ~]# samba-tool drs options 192.168.150.10 -d 5 
--dsa-option=-DISABLE_INBOUND_REPL -UAdministrator
Is this the recommended approach? Are there any known issues or side 
effects I should be aware of?
Thank you.

-- 
*Anton*
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba