samba - Oct 2023 - Linux/Windows Domain Controller

Hello Together,

we are updating at the moment our old 2012 DCs to 2022 DCs. For a test 
scenario we were tempted to finally try for dc03 and dc04 a linux 
machine as DC. But at the point we tried to join the machine as a dc we 
go prompted by the ugly message:

DsAddEntry failed with status WERR_ACCESS_DENIED info (8567,
'WERR_DS_INCOMPATIBLE_VERSION')

We investigated what might be the issue an found: 
https://wiki.samba.org/index.php/Windows_2012_Server_compatibility#2012_functional_level_or_above

Is it really impossible to join the existing domain on dc01 and dc02? 
Sadly we have some really old scripts laying around and in the short 
term it is diffcult to relay only on linux dcs.
-- 

Kind Regards

Matti Kaupenjohann

Fachhochschule Dortmund
University of Applied Sciences and Arts

*Kaupenjohann, Matti*
FB Informationstechnik,

Sonnenstra?e 96 - 44139 Dortmund
Raum SON-A A615
Tel???? 0231 9112 9371
matti.kaupenjohann at fh-dortmund.de
www.fh-dortmund.de

Think before you print!

If you take a look at:

https://wiki.samba.org/index.php/Windows_2012_Server_compatibility

You will find your error message. I think your domain is running with FL 
2012 and you are using a samba version < 4.19. So you can only go up to 
FL 2008_R2. The new 4.19 is the first version supporting FL >2008_R2. 
There you can go up to FL 2016.


Am 18.10.23 um 18:05 schrieb matti.kaupenjohann via
samba:
> DsAddEntry failed with status WERR_ACCESS_DENIED info (8567,
> 'WERR_DS_INCOMPATIBLE_VERSION')