I am seeing domain and forest levels for 2012R2 mentioned in the wiki pages. Has anyone in a production environment "raised" their domain and forest levels to 2012R2 yet? Am I correct that this would only apply to v4.5.0 or higher? -- _______________________________ Bob Wooden of Donelson Trophy
Hi Bob, Am 02.11.2016 um 15:00 schrieb Bob of Donelson Trophy via samba:> I am seeing domain and forest levels for 2012R2 mentioned in the wiki > pages. > > Has anyone in a production environment "raised" their domain and forest > levels to 2012R2 yet? > > Am I correct that this would only apply to v4.5.0 or higher?For what do you need the 2012R2 functional level? Raising the level to anything higher than 2008_R2 currently fails: https://bugzilla.samba.org/show_bug.cgi?id=12406 Regards, Marc
On Wed, 2016-11-02 at 09:00 -0500, Bob of Donelson Trophy via samba wrote:> I am seeing domain and forest levels for 2012R2 mentioned in the wiki > pages. > > Has anyone in a production environment "raised" their domain and > forest > levels to 2012R2 yet? > > Am I correct that this would only apply to v4.5.0 or higher?We don't support that functional level. The only thing that would do is lie to a Windows 2012 server or future Samba server, we don't have the code for the Kerberos improvements it implies. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
On 2016-11-02 12:29, Marc Muehlfeld via samba wrote:> Hi Bob, > > Am 02.11.2016 um 15:00 schrieb Bob of Donelson Trophy via samba: > >> I am seeing domain and forest levels for 2012R2 mentioned in the wiki >> pages. >> >> Has anyone in a production environment "raised" their domain and forest >> levels to 2012R2 yet? >> >> Am I correct that this would only apply to v4.5.0 or higher? > > For what do you need the 2012R2 functional level? > > Raising the level to anything higher than 2008_R2 currently fails: > https://bugzilla.samba.org/show_bug.cgi?id=12406 > > Regards, > MarcI do not . . . like a little child, if I see something new I think I should try it . . . that bug report clearly suggests that I should be patient . . . (going to go pout over in the corner of the playground for a little bit 'cause I can't play with that new toy right now . . . lol.) << intentional humor -- _______________________________ Bob Wooden of Donelson Trophy
On 2016-11-02 12:36, Andrew Bartlett via samba wrote:> On Wed, 2016-11-02 at 09:00 -0500, Bob of Donelson Trophy via samba > wrote: > >> I am seeing domain and forest levels for 2012R2 mentioned in the wiki >> pages. >> >> Has anyone in a production environment "raised" their domain and >> forest >> levels to 2012R2 yet? >> >> Am I correct that this would only apply to v4.5.0 or higher? > > We don't support that functional level. The only thing that would do > is lie to a Windows 2012 server or future Samba server, we don't have > the code for the Kerberos improvements it implies. > > Andrew Bartlett > > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Samba Developer, Catalyst IT http://catalyst.net.nz/services/sambaThanks for your time, Andrew. I just got the cart before the horse . . as they say. -- _______________________________ Bob Wooden of Donelson Trophy