samba - Feb 2018 - how to upgrade schema version?

Hi!

I'm running samba 4.3.11 on Ubuntu server Xenial. It's the only AD-DC in
a windows domain that used to be hosted by a single Win2k3 server.

The AD schema version is 30, the functionality level is already raised 
to 2008_R2 (domain) and 2008 (forest).

~# ldbsearch -H /var/lib/samba/private/sam.ldb -b 
'cn=Schema,cn=Configuration,dc=domain,dc=com' -s base objectVersion
# record 1
dn: CN=Schema,CN=Configuration,DC=vswest,DC=intern
objectVersion: 30

Now I cannot access the Domain Controllers via RSAT and the logs show 
"cannot find attr[msDS-isRODC] in of schema".

How do I upgrade the schema?

On Wed, 14 Feb 2018 18:27:20 +0100
Peter Schmidt via samba <samba at lists.samba.org> wrote:
> Hi!
> 
> I'm running samba 4.3.11 on Ubuntu server Xenial. It's the only
AD-DC
> in a windows domain that used to be hosted by a single Win2k3 server.
> 
> The AD schema version is 30, the functionality level is already
> raised to 2008_R2 (domain) and 2008 (forest).
> 
> ~# ldbsearch -H /var/lib/samba/private/sam.ldb -b 
> 'cn=Schema,cn=Configuration,dc=domain,dc=com' -s base objectVersion
> # record 1
> dn: CN=Schema,CN=Configuration,DC=vswest,DC=intern
> objectVersion: 30
> 
> Now I cannot access the Domain Controllers via RSAT and the logs show 
> "cannot find attr[msDS-isRODC] in of schema".
> 
> How do I upgrade the schema?
> 
This has happened before, see here:

https://lists.samba.org/archive/samba/2015-December/196850.html

Don't know if it will help though, you need the schema ldifs

Rowland

Hello ,

I did it from schema version 31 to 47.
You'll have to get the ldf files used by adprep.
The files have to be split between updates and adds.
There must be also some syntax changes.
I can send you the resulting files if you want.

You'll also need to manually add some informations in order to be able to
join a real windows 2008 R2 controller.
Those informations are :
CN=ActiveDirectoryUpdate,CN=ForestUpdates,cn=configuration,dc=yourdomain,dc=local
with the attribute revision set to 5
and
CN=ActiveDirectoryUpdate,CN=DomainUpdates,CN=System,dc=yourdomain,dc=local with
the attribute revision set to 5

As I'm not yet able to join a real windows 2008 R2 controller ( dcpromo
fails when trying to replicate the configuration partition ),
 I'm not sure it is enough.

---------------------------------------------
Christophe Borivant
Responsable d'exploitation informatique
+33 5 62 20 71 71 (Poste 503)

Devinlec - Groupe Leclerc
--------------------------------------------

----- Mail original -----
De: "samba" <samba at lists.samba.org>
À: "samba" <samba at lists.samba.org>
Envoyé: Mercredi 14 Février 2018 18:52:46
Objet: Re: [Samba] how to upgrade schema version?

On Wed, 14 Feb 2018 18:27:20 +0100
Peter Schmidt via samba <samba at lists.samba.org> wrote:
> Hi!
> 
> I'm running samba 4.3.11 on Ubuntu server Xenial. It's the only
AD-DC
> in a windows domain that used to be hosted by a single Win2k3 server.
> 
> The AD schema version is 30, the functionality level is already
> raised to 2008_R2 (domain) and 2008 (forest).
> 
> ~# ldbsearch -H /var/lib/samba/private/sam.ldb -b 
> 'cn=Schema,cn=Configuration,dc=domain,dc=com' -s base objectVersion
> # record 1
> dn: CN=Schema,CN=Configuration,DC=vswest,DC=intern
> objectVersion: 30
> 
> Now I cannot access the Domain Controllers via RSAT and the logs show 
> "cannot find attr[msDS-isRODC] in of schema".
> 
> How do I upgrade the schema?
> 
This has happened before, see here:

https://lists.samba.org/archive/samba/2015-December/196850.html

Don't know if it will help though, you need the schema ldifs

Rowland

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba