samba - Jan 2013 - Samba AD DC initial join fails at schema replication

Date: 16Jan2013
Samba Version: 4.0.1
OS Version: RHEL 6.3
Windows OS: Server 2012
Forest/Domain: 2008r2

Replaced libnet_vampire.c (corrected ERROR: no subClassOf 'top' for
'samDomain') source [https://bugzilla.samba.org/show_bug.cgi?id=8680]

#/usr/lobal/bin/samba-tool domain join <dnsdomain> DC -U administrator

Identifies DC, joins the domain and performs adding SPNs to the Domain
Controllers OU
.....
Setting account password for RHELDC1$

Enabling account

Calling bare provision

No IPv6 address will be assigned

Provision OK for domain DN <dnsdomain>

Starting replication

Schema-DN[CN=Schema,CN=Configuration,<dnsdomain>] objects[402]
linked_values[0]

Schema-DN[CN=Schema,CN=Configuration,<dnsdomain>] objects[802]
linked_values[0]

Schema-DN[CN=Schema,CN=Configuration,<dnsdomain>] objects[1206]
linked_values[0]

Schema-DN[CN=Schema,CN=Configuration,<dnsdomain>] objects[1593]
linked_values[0]

Schema-DN[CN=Schema,CN=Configuration,<dnsdomain>] objects[1688]
linked_values[0]

Analyze and apply schema objects

Can't continue Schema load: didn't manage to convert any objects: all 22
remaining of 1688 objects failed to convert

Join failed - cleaning up

.....

-d 1 returns several messages (some of the messages follow (would include more
but I have to handjam them out), all of the messages state a failure to convert
into ldb msg):

../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x000908BA

Warning: Failed to convert schema object
CN=Computer,CN=Schema,CN=Configuration,<dnsdomain> into ldb msg

../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id 0x000908A5

Warning: Failed to convert schema object
CN=RID-Manager,CN=Schema,CN=Configuration,<dnsdomain> into ldb msg

../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID_id 0x000A010D

Warning: Failed to convert schema object
CN=ms-DS-Claim-Type,CN=Schema,CN=Configuration,<dnsdomain> into ldb msg

On 01/16/2013 06:03 PM, Rican, Joshua T Civ USAF AF ISR Agency 
NASIC/SCXE wrote:
> Date: 16Jan2013
> Samba Version: 4.0.1
> OS Version: RHEL 6.3
> Windows OS: Server 2012
> Forest/Domain: 2008r2
>
> Replaced libnet_vampire.c (corrected ERROR: no subClassOf 'top' for
'samDomain') source [https://bugzilla.samba.org/show_bug.cgi?id=8680]
>
> #/usr/lobal/bin/samba-tool domain join <dnsdomain> DC -U
administrator
>
> Identifies DC, joins the domain and performs adding SPNs to the Domain
Controllers OU
> .....
> Setting account password for RHELDC1$
>
> Enabling account
>
> Calling bare provision
>
> No IPv6 address will be assigned
>
> Provision OK for domain DN <dnsdomain>
>
> Starting replication
>
> Schema-DN[CN=Schema,CN=Configuration,<dnsdomain>] objects[402]
linked_values[0]
>
> Schema-DN[CN=Schema,CN=Configuration,<dnsdomain>] objects[802]
linked_values[0]
>
> Schema-DN[CN=Schema,CN=Configuration,<dnsdomain>] objects[1206]
linked_values[0]
>
> Schema-DN[CN=Schema,CN=Configuration,<dnsdomain>] objects[1593]
linked_values[0]
>
> Schema-DN[CN=Schema,CN=Configuration,<dnsdomain>] objects[1688]
linked_values[0]
>
> Analyze and apply schema objects
>
> Can't continue Schema load: didn't manage to convert any objects:
all 22 remaining of 1688 objects failed to convert
>
> Join failed - cleaning up
>
> .....
>
> -d 1 returns several messages (some of the messages follow (would include
more but I have to handjam them out), all of the messages state a failure to
convert into ldb msg):
>
> ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id
0x000908BA
>
> Warning: Failed to convert schema object
CN=Computer,CN=Schema,CN=Configuration,<dnsdomain> into ldb msg
>
> ../source4/dsdb/schema/schema_syntax.c:1076: Unknown attributeID_id
0x000908A5
>
> Warning: Failed to convert schema object
CN=RID-Manager,CN=Schema,CN=Configuration,<dnsdomain> into ldb msg
>
> ../source4/dsdb/schema/schema_syntax.c:1021: Unknown governsID_id
0x000A010D
>
> Warning: Failed to convert schema object
CN=ms-DS-Claim-Type,CN=Schema,CN=Configuration,<dnsdomain> into ldb msg
>
That's a known issue I have a patch for this it was working back in 
October and it's in my todo to restest it, ping me in a couple of days, 
for the moment you need not to have Windows 2012 schema.

That is to say never join a Windows 2012 server to your domain.

-- 
Matthieu Patou
Samba Team
http://samba.org