samba - Dec 2015 - Was not found in the schema 'msDS-SupportedEncryptionTypes'

Good afternoon!
Had a samba 4 with a Windows 2003 network that is not over, I went up to 
the level of my domain / forest

Forest level function: (Windows) 2008 R2
Domain function level: (Windows) 2008 R2
Lowest function level of the DC (Windows) 2008 R2

But it seems that Samba is not with all attributes of a Windows 2008.
Even try to join another Samba error appears

ERROR (ldb): uncaught exception - LDAP error 16 LDAP_NO_SUCH ATTRIBUTE - 
<0000200 A: objectclass attrs: attribute
"msDS-SupportedEncryptionTypes'
on entry 'CN = DC-LINUX-09, OU = Domain Controllers, DC = mydomain' was 
not found in the schema> <!>

Any idea ?

S.O systems:
Both Ubuntu 14:04
Samba version 4.3.3 (the Current was made Upgrade 4.2 -> 4.3 -> 4.3.3)

On 29/12/15 14:56, Carlos A. P. Cunha wrote:
> Good afternoon!
> Had a samba 4 with a Windows 2003 network that is not over, I went up 
> to the level of my domain / forest
>
> Forest level function: (Windows) 2008 R2
> Domain function level: (Windows) 2008 R2
> Lowest function level of the DC (Windows) 2008 R2
>
> But it seems that Samba is not with all attributes of a Windows 2008.
> Even try to join another Samba error appears
>
> ERROR (ldb): uncaught exception - LDAP error 16 LDAP_NO_SUCH ATTRIBUTE 
> - <0000200 A: objectclass attrs: attribute 
> "msDS-SupportedEncryptionTypes' on entry 'CN = DC-LINUX-09, OU
=
> Domain Controllers, DC = mydomain' was not found in the schema>
<!>
>
> Any idea ?
>
>
There appears to be something wrong with your setup, if you examine the 
file 'MS-AD_Schema_2K8_R2_Attributes.txt' (should be on your system, in 
a directory called ad-schema), you will this:

cn: ms-DS-Supported-Encryption-Types
ldapDisplayName: msDS-SupportedEncryptionTypes
attributeId: 1.2.840.113556.1.4.1963
attributeSyntax: 2.5.5.9
omSyntax: 2
isSingleValued: TRUE
schemaIdGuid: 20119867-1d04-4ab7-9371-cfc3d5df0afd
systemOnly: FALSE
searchFlags: 0
attributeSecurityGuid: 77b5b886-944a-11d1-aebd-0000f80367c1
systemFlags: FLAG_SCHEMA_BASE_OBJECT
schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

And your DC objects should have this:

msDS-SupportedEncryptionTypes: 31

Was the original DC a Samba 4 DC ?

Rowland

Em 29-12-2015 15:15, Carlos A. P. Cunha escreveu:
> Good afternoon!
> I found the file that you mentioned and this like yours.
>
> Looking co attributes like this:
>
> ldbsearch -H /usr/local/samba/private/sam.ldb '(objectclass =
person)'
>
> Not any line with the ms-DS-Supported-Encryption-Types attribute
>
> My Orginial scenario went like this:
>
> Windows 2003 there came the samba (4.2), the windows died, was only 
> the samba that was upgraded to version 4.3 and climbed the functional 
> level to those reported in another e-mail, and now version 4.3.3.
>
>
>
> Em 29-12-2015 13:25, Rowland penny escreveu:
>> On 29/12/15 14:56, Carlos A. P. Cunha wrote:
>>> Good afternoon!
>>> Had a samba 4 with a Windows 2003 network that is not over, I went 
>>> up to the level of my domain / forest
>>>
>>> Forest level function: (Windows) 2008 R2
>>> Domain function level: (Windows) 2008 R2
>>> Lowest function level of the DC (Windows) 2008 R2
>>>
>>> But it seems that Samba is not with all attributes of a Windows
2008.
>>> Even try to join another Samba error appears
>>>
>>> ERROR (ldb): uncaught exception - LDAP error 16 LDAP_NO_SUCH 
>>> ATTRIBUTE - <0000200 A: objectclass attrs: attribute 
>>> "msDS-SupportedEncryptionTypes' on entry 'CN =
DC-LINUX-09, OU =
>>> Domain Controllers, DC = mydomain' was not found in the
schema> <!>
>>>
>>> Any idea ?
>>>
>>>
>>
>> There appears to be something wrong with your setup, if you examine 
>> the file 'MS-AD_Schema_2K8_R2_Attributes.txt' (should be on
your
>> system, in a directory called ad-schema), you will this:
>>
>> cn: ms-DS-Supported-Encryption-Types
>> ldapDisplayName: msDS-SupportedEncryptionTypes
>> attributeId: 1.2.840.113556.1.4.1963
>> attributeSyntax: 2.5.5.9
>> omSyntax: 2
>> isSingleValued: TRUE
>> schemaIdGuid: 20119867-1d04-4ab7-9371-cfc3d5df0afd
>> systemOnly: FALSE
>> searchFlags: 0
>> attributeSecurityGuid: 77b5b886-944a-11d1-aebd-0000f80367c1
>> systemFlags: FLAG_SCHEMA_BASE_OBJECT
>> schemaFlagsEx: FLAG_ATTR_IS_CRITICAL
>>
>> And your DC objects should have this:
>>
>> msDS-SupportedEncryptionTypes: 31
>>
>> Was the original DC a Samba 4 DC ?
>>
>> Rowland
>>
>>
>>
>

Try your search like this:

ldbsearch -H /usr/local/samba/private/sam.ldb '(objectclass=computer)' 
msDS-SupportedEncryptionTypes