A Samba4-based Active Directory-compatible domain controller that supports printing services and centralized Netlogon authentication for Windows systems, without requiring Windows Server.

The online backup works best for providing a long-term replacement for your domain. It can be used as a temporary replacement, but you cannot easily troubleshoot the failed domain DCs at the same time. Investigating the reason behind the failure of a Samba domain could be time-consuming and technically complex work. If, in the event of a catastrophic domain failure, you don't intend to investigate the problem and just want to revert back to a older copy of a working domain, then this is the best option for you. //

Online DC backup

To create an online backup, use:

sudo samba-tool domain backup online --targetdir=<output-dir> --server=<DC-server> -UAdministrator

This command can be run locally on the DC or remotely on another machine. If running the command remotely, you may want to specify a --configfile option so that the correct smb.conf settings get included in the backup (i.e. the local smb.conf file may not exist, or its settings may be different to your domain DCs).