11 Replies Latest reply on Sep 15, 2016 8:20 AM by Glen Robinson

Server domain migration

Jeff Strauss Sep 15, 2016 7:26 AM

Are there any shortcuts besides doing a re-install? And if I have to do a re-install, do I need to do this on just the primary or also the workers?

We are migrating our cluster and our AD (one primary, three workers) to a new domain. Oh joy!!!!!!!!!!

We are currently on 9.2.6, after we get done with the domain migration, then we will be upgrading to 10.

1. Re: Server domain migration

Glen Robinson Sep 15, 2016 7:28 AM (in response to Jeff Strauss)

Jeff
Are your users AD authenticated or Local authenticated?
Glen
Like Show 0 Likes(0)

Actions
2. Re: Server domain migration

Jeff Strauss Sep 15, 2016 7:33 AM (in response to Glen Robinson)

AD authenticated.

I have thought about stopping TS, updating the tabsvc.yml and workgroup.yml to point at the new domain, and then restarting, but I'm not sure that this is a fail-safe sure-fire path or are there other configs. Also, the workers are connected to the primary via the hostname without the domain name (i.e. ORD-TBL104 instead of ORD-TBL104.corp.valueclick.com)
Like Show 0 Likes(0)

Actions
3. Re: Server domain migration

Glen Robinson Sep 15, 2016 7:36 AM (in response to Jeff Strauss)

My bigger concern is all of your users.
Are they also moving to this new domain?
in which they will need new accounts to be setup and added to Tableau Server
Like Show 0 Likes(0)

Actions
4. Re: Server domain migration

Jeff Strauss Sep 15, 2016 7:41 AM (in response to Glen Robinson)

the users have already migrated And for right now, we lost seamless signon (via the default portal), but it's not that big of a concern because most users go in using trusted auth via our custom portal and they still have seamless signon here. Once the servers are migrated and we do a tabcmd editdomain (quite powerful), the seamless signon (for the default portal) should work again.
Like Show 0 Likes(0)

Actions
5. Re: Server domain migration

Glen Robinson Sep 15, 2016 7:48 AM (in response to Jeff Strauss)

But they are logging into Tableau Server using their old domain accounts?
This will also need to be migrated to the new domain, in which case all that security will need to be recreated (espicially if you are using domain groups)

As for the server migration, the following should work (though I havent tested it)
1. Stop tableau cluster
2. remove servers from old domain
3. add servers to new domain
4. on primary go into configuration utility and change runas account to new account for new domain. ensure this account has adequate rights on all servers in cluster
5. update domain details to new domain.
6. start tableau cluster

Obviously something will go wrong and you'll wish that you built a new cluster and migrated into it (which would be my recommendation)

Glen
Like Show 0 Likes(0)

Actions
6. Re: Server domain migration

Jeff Strauss Sep 15, 2016 7:54 AM (in response to Glen Robinson)

thanks Glen.

- Users are already logging into TS using their new accounts (CNVR\jstrauss) instead of (CORP\jstrauss).

- You make me think of important stuff such as the runas user needs to be in the new domain.

- Chances are we will go the long way. And we don't have the luxury of having new hardware and building a new cluster and then migrating, so it will be a weekend activity to uninstall / migrate / reinstall.
Like Show 0 Likes(0)

Actions
7. Re: Server domain migration

Glen Robinson Sep 15, 2016 7:59 AM (in response to Jeff Strauss)

Jeff
I dont think that you need to uninstall Tableau Server and Workers.
I think that removing from old domain and adding to new one would be enough.
I would try this first, and if it fails, then do a re-install
Good luck
Glen
Like Show 0 Likes(0)

Actions
8. Re: Server domain migration

Jeff Strauss Sep 15, 2016 8:08 AM (in response to Glen Robinson)

I will try on dev per your instructions. My concern is that the AD domain is unchangable grayed out in the config. And there are config settings within the tabsvc.yml and workgroup.yml that point at the domain too.
Like Show 0 Likes(0)

Actions
9. Re: Server domain migration

Glen Robinson Sep 15, 2016 8:11 AM (in response to Jeff Strauss)

Yeah good point....
You could try the Tabcmd editdomain to see if that helps you...
tabcmd Commands
Like Show 0 Likes(0)

Actions
10. Re: Server domain migration

Jeff Strauss Sep 15, 2016 8:17 AM (in response to Glen Robinson)

I ran the tabcmd editdomain for our external users that login to TS as they 100% migrated to a different domain at this point. All this command does is it updates the domain pointer within PG table public.domains
Like Show 0 Likes(0)

Actions
11. Re: Server domain migration

Glen Robinson Sep 15, 2016 8:20 AM (in response to Jeff Strauss)

Editing the tabsvc.yml file it is then
I'm sure that I have updated the Domain nickname in this way, but not the actual domain itself

Glen
Like Show 0 Likes(0)

Actions