Is it correct to use samba-tool drs options to temporarily disable replication on a DC?
Anton Shevtsov via samba <[email protected]> Thu, 14 May 2026 15:23:43 +0500
| Newsgroups | gmane.network.samba.general |
|---|---|
| Organization | BaseALT |
| Message-ID | <[email protected]> |
Hi, Is it correct and safe to temporarily disable replication on a specific domain controller while keeping it fully operational (able to serve authentication requests, etc.) using the following commands? [root@dc ~]# samba-tool drs options 192.168.150.10 -d 5 --dsa-option=+DISABLE_OUTBOUND_REPL -UAdministrator [root@dc ~]# samba-tool drs options 192.168.150.10 -d 5 --dsa-option=+DISABLE_INBOUND_REPL -UAdministrator After performing the necessary actions on that DC, I would re-enable replication with: [root@dc ~]# samba-tool drs options 192.168.150.10 -d 5 --dsa-option=-DISABLE_OUTBOUND_REPL -UAdministrator [root@dc ~]# samba-tool drs options 192.168.150.10 -d 5 --dsa-option=-DISABLE_INBOUND_REPL -UAdministrator Is this the recommended approach? Are there any known issues or side effects I should be aware of? Thank you. -- *Anton* -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba