David Minard
2018-Nov-13 04:53 UTC
[Samba] Samba-4.8.5 and SCCM-5.0 Problem Extending the Schema
G'day All, We are trying to set up SCCM-5.0. Our AD test is Samba-4.8.5. SCCM requires schema changes, and Samba is rejecting these. Anyone tackled this? Ideas on how to proceed? The output thrown by the SCCM exe (extadsch.exe) is: Microsoft System Center Configuration Manager v5.00 (Build 8634) Copyright (C) 2011 Microsoft Corp. Failed to extend the Active Directory schema. Your Active Directory does not allow schema updates, please find details in "C:\ExtADSch.log". D:\> log results of multiple attempts, and reboots ----------------------------------------------------------------------------------------------------- <11-13-2018 11:52:21> Modifying Active Directory Schema - with SMS extensions. ?<11-13-2018 11:52:21> DS Root:CN=Schema,CN=Configuration,DC=scem-test,DC=scem,DC=westernsydney,DC=edu,DC=au ?<11-13-2018 11:52:21> Failed to create attribute cn=MS-SMS-Site-Code. Error code = 8245. ?<11-13-2018 11:52:21> Failed to create attribute cn=mS-SMS-Assignment-Site-Code. Error code = 8245. ?<11-13-2018 11:52:22> Failed to create attribute cn=MS-SMS-Site-Boundaries. Error code = 8245. ?<11-13-2018 11:52:22> Failed to create attribute cn=MS-SMS-Roaming-Boundaries. Error code = 8245. ?<11-13-2018 11:52:22> Failed to create attribute cn=MS-SMS-Default-MP. Error code = 8245. ?<11-13-2018 11:52:22> Failed to create attribute cn=mS-SMS-Device-Management-Point. Error code = 8245. ?<11-13-2018 11:52:22> Failed to create attribute cn=MS-SMS-MP-Name. Error code = 8245. ?<11-13-2018 11:52:22> Failed to create attribute cn=MS-SMS-MP-Address. Error code = 8245. ?<11-13-2018 11:52:22> Failed to create attribute cn=mS-SMS-Health-State. Error code = 8245. ?<11-13-2018 11:52:22> Failed to create attribute cn=mS-SMS-Source-Forest. Error code = 8245. ?<11-13-2018 11:52:23> Failed to create attribute cn=MS-SMS-Ranged-IP-Low. Error code = 8245. ?<11-13-2018 11:52:23> Failed to create attribute cn=MS-SMS-Ranged-IP-High. Error code = 8245. ?<11-13-2018 11:52:23> Failed to create attribute cn=mS-SMS-Version. Error code = 8245. ? <11-13-2018 11:52:48> Modifying Active Directory Schema - with SMS extensions. ?<11-13-2018 11:52:48> DS Root:CN=Schema,CN=Configuration,DC=scem-test,DC=scem,DC=westernsydney,DC=edu,DC=au ?<11-13-2018 11:52:49> Failed to create attribute cn=MS-SMS-Site-Code. Error code = 8245. ?<11-13-2018 11:52:49> Failed to create attribute cn=mS-SMS-Assignment-Site-Code. Error code = 8245. ?<11-13-2018 11:52:49> Failed to create attribute cn=MS-SMS-Site-Boundaries. Error code = 8245. ?<11-13-2018 11:52:49> Failed to create attribute cn=MS-SMS-Roaming-Boundaries. Error code = 8245. ?<11-13-2018 11:52:49> Failed to create attribute cn=MS-SMS-Default-MP. Error code = 8245. ?<11-13-2018 11:52:49> Failed to create attribute cn=mS-SMS-Device-Management-Point. Error code = 8245. ?<11-13-2018 11:52:49> Failed to create attribute cn=MS-SMS-MP-Name. Error code = 8245. ?<11-13-2018 11:52:49> Failed to create attribute cn=MS-SMS-MP-Address. Error code = 8245. ?<11-13-2018 11:52:49> Failed to create attribute cn=mS-SMS-Health-State. Error code = 8245. ?<11-13-2018 11:52:49> Failed to create attribute cn=mS-SMS-Source-Forest. Error code = 8245. ?<11-13-2018 11:52:50> Failed to create attribute cn=MS-SMS-Ranged-IP-Low. Error code = 8245. ?<11-13-2018 11:52:50> Failed to create attribute cn=MS-SMS-Ranged-IP-High. Error code = 8245. ?<11-13-2018 11:52:50> Failed to create attribute cn=mS-SMS-Version. Error code = 8245. ?<11-13-2018 11:52:50> Failed to create attribute cn=mS-SMS-Capabilities. Error code = 8245. ?<11-13-2018 11:52:50> Failed to create class cn=MS-SMS-Management-Point. Error code = 8203. ?<11-13-2018 11:52:50> Failed to create class cn=MS-SMS-Server-Locator-Point. Error code = 8203. ?<11-13-2018 11:52:50> Failed to create class cn=MS-SMS-Site. Error code = 8203. ?<11-13-2018 11:52:50> Failed to create class cn=MS-SMS-Roaming-Boundary-Range. Error code = 8203. ?<11-13-2018 11:52:50> Failed to extend the Active Directory schema. Your Active Directory does not allow schema updates, please find details in "C:\ExtADSch.log". ----------------------------------------------------------------------------------------------------- <11-13-2018 13:05:51> Modifying Active Directory Schema - with SMS extensions. ?<11-13-2018 13:05:51> DS Root:CN=Schema,CN=Configuration,DC=scem-test,DC=scem,DC=westernsydney,DC=edu,DC=au ?<11-13-2018 13:05:52> Failed to create attribute cn=MS-SMS-Site-Code. Error code = 8245. ?<11-13-2018 13:05:52> Failed to create attribute cn=mS-SMS-Assignment-Site-Code. Error code = 8245. ?<11-13-2018 13:05:52> Failed to create attribute cn=MS-SMS-Site-Boundaries. Error code = 8245. ?<11-13-2018 13:05:52> Failed to create attribute cn=MS-SMS-Roaming-Boundaries. Error code = 8245. ?<11-13-2018 13:05:52> Failed to create attribute cn=MS-SMS-Default-MP. Error code = 8245. ?<11-13-2018 13:05:52> Failed to create attribute cn=mS-SMS-Device-Management-Point. Error code = 8245. ?<11-13-2018 13:05:53> Failed to create attribute cn=MS-SMS-MP-Name. Error code = 8245. ?<11-13-2018 13:05:53> Failed to create attribute cn=MS-SMS-MP-Address. Error code = 8245. ?<11-13-2018 13:05:53> Failed to create attribute cn=mS-SMS-Health-State. Error code = 8245. ?<11-13-2018 13:05:53> Failed to create attribute cn=mS-SMS-Source-Forest. Error code = 8245. ?<11-13-2018 13:05:53> Failed to create attribute cn=MS-SMS-Ranged-IP-Low. Error code = 8245. ?<11-13-2018 13:05:53> Failed to create attribute cn=MS-SMS-Ranged-IP-High. Error code = 8245. ?<11-13-2018 13:05:53> Failed to create attribute cn=mS-SMS-Version. Error code = 8245. ?<11-13-2018 13:05:54> Failed to create attribute cn=mS-SMS-Capabilities. Error code = 8245. ?<11-13-2018 13:05:54> Failed to create class cn=MS-SMS-Management-Point. Error code = 8203. ?<11-13-2018 13:05:54> Failed to create class cn=MS-SMS-Server-Locator-Point. Error code = 8203. ?<11-13-2018 13:05:54> Failed to create class cn=MS-SMS-Site. Error code = 8203. ?<11-13-2018 13:05:54> Failed to create class cn=MS-SMS-Roaming-Boundary-Range. Error code = 8203. ?<11-13-2018 13:05:54> Failed to extend the Active Directory schema. Your Active Directory does not allow schema updates, please find details in "C:\ExtADSch.log". ? <11-13-2018 13:06:06> Modifying Active Directory Schema - with SMS extensions. ?<11-13-2018 13:06:06> DS Root:CN=Schema,CN=Configuration,DC=scem-test,DC=scem,DC=westernsydney,DC=edu,DC=au ?<11-13-2018 13:06:06> Failed to create attribute cn=MS-SMS-Site-Code. Error code = 8245. ?<11-13-2018 13:06:06> Failed to create attribute cn=mS-SMS-Assignment-Site-Code. Error code = 8245. ?<11-13-2018 13:06:06> Failed to create attribute cn=MS-SMS-Site-Boundaries. Error code = 8245. ?<11-13-2018 13:06:06> Failed to create attribute cn=MS-SMS-Roaming-Boundaries. Error code = 8245. ?<11-13-2018 13:06:07> Failed to create attribute cn=MS-SMS-Default-MP. Error code = 8245. ?<11-13-2018 13:06:07> Failed to create attribute cn=mS-SMS-Device-Management-Point. Error code = 8245. ?<11-13-2018 13:06:07> Failed to create attribute cn=MS-SMS-MP-Name. Error code = 8245. ?<11-13-2018 13:06:07> Failed to create attribute cn=MS-SMS-MP-Address. Error code = 8245. ?<11-13-2018 13:06:08> Failed to create attribute cn=mS-SMS-Health-State. Error code = 8245. ?<11-13-2018 13:06:08> Failed to create attribute cn=mS-SMS-Source-Forest. Error code = 8245. ?<11-13-2018 13:06:08> Failed to create attribute cn=MS-SMS-Ranged-IP-Low. Error code = 8245. ?<11-13-2018 13:06:08> Failed to create attribute cn=MS-SMS-Ranged-IP-High. Error code = 8245. ?<11-13-2018 13:06:08> Failed to create attribute cn=mS-SMS-Version. Error code = 8245. ?<11-13-2018 13:06:08> Failed to create attribute cn=mS-SMS-Capabilities. Error code = 8245. ?<11-13-2018 13:06:08> Failed to create class cn=MS-SMS-Management-Point. Error code = 8203. ?<11-13-2018 13:06:09> Failed to create class cn=MS-SMS-Server-Locator-Point. Error code = 8203. ?<11-13-2018 13:06:09> Failed to create class cn=MS-SMS-Site. Error code = 8203. ?<11-13-2018 13:06:09> Failed to create class cn=MS-SMS-Roaming-Boundary-Range. Error code = 8203. ?<11-13-2018 13:06:09> Failed to extend the Active Directory schema. Your Active Directory does not allow schema updates, please find details in "C:\ExtADSch.log". -- Cheers, David Minard. Ph: 0247 360 155 ITDS - ACE - SSTaRS Western Sydney University Building Y - Penrith Campus (Kingswood) Locked bag 1797 Penrith NSW 2751 For IT assistance contact the Service Desk - Ext 5111 or W: MyIT.westernsydney.edu.au; E: ITServiceDesk at westernsydney.edu.au; Chat: MyIT.westernsydney.edu.au, login and click on "Chat"; P: (02) 9852-5111. | Extn 5111 [Sometimes waking up just isn't worth the insult of the day to come.] -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Andrew Bartlett
2018-Nov-13 05:29 UTC
[Samba] Samba-4.8.5 and SCCM-5.0 Problem Extending the Schema
On Tue, 2018-11-13 at 15:53 +1100, David Minard via samba wrote:> G'day All, > > We are trying to set up SCCM-5.0. Our AD test is Samba-4.8.5. > > SCCM requires schema changes, and Samba is rejecting these. > > Anyone tackled this? Ideas on how to proceed? > > The output thrown by the SCCM exe (extadsch.exe) is:Have you set "dsdb:schema update allowed=yes" https://wiki.samba.org/index.php/Samba_AD_schema_extensions Take a good backup using Samba 4.9's backup tools first. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
David Minard
2018-Nov-13 06:37 UTC
[Samba] Samba-4.8.5 and SCCM-5.0 Problem Extending the Schema
Thank you for the quick reply. On 13/11/18 16:29, Andrew Bartlett wrote:> On Tue, 2018-11-13 at 15:53 +1100, David Minard via samba wrote: >> G'day All, >> >> We are trying to set up SCCM-5.0. Our AD test is Samba-4.8.5. >> >> SCCM requires schema changes, and Samba is rejecting these. >> >> Anyone tackled this? Ideas on how to proceed? >> >> The output thrown by the SCCM exe (extadsch.exe) is: > > Have you set "dsdb:schema update allowed=yes"Ah no. Done now, and we will see how it goes.> > https://wiki.samba.org/index.php/Samba_AD_schema_extensionsDidn't find this article. My Google Foo must be broken. Thank you for the pointer.> > Take a good backup using Samba 4.9's backup tools first.Definitely.> > Andrew Bartlett >-- Cheers, David Minard. Ph: 0247 360 155 ITDS - ACE - SSTaRS Western Sydney University Building Y - Penrith Campus (Kingswood) Locked bag 1797 Penrith NSW 2751 For IT assistance contact the Service Desk - Ext 5111 or W: MyIT.westernsydney.edu.au; E: ITServiceDesk at westernsydney.edu.au; Chat: MyIT.westernsydney.edu.au, login and click on "Chat"; P: (02) 9852-5111. | Extn 5111 [Sometimes waking up just isn't worth the insult of the day to come.] -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.