samba - May 2024 - Clarification on Samba AD functional levels

Hello all,

Does Samba properly support 2012_R2 domains? If so, what is the earliest 
version of Samba AD that supports it? I see that the most recent 
versions support ad dc functional level = 2012_R2 in smb.conf but I am 
unsure if I can safely run 2012_R2 functional level on older versions of 
Samba.


A little background:

In my test environment I setup a Samba 4.20 AD Domain Controller with 
functional level 2012_R2. From there I joined a Windows Server 2022 to 
the domain and I forced the activation of the time and sysvol with help 
from this guide: 
https://samba.tranquil.it/doc/en/samba_advanced_methods/samba_add_windows_active_directory.html

As far as I can tell it is working correctly correctly. However, I am 
curious if I can get something similar to this working on something more 
stable than Fedora server.


Thank you for your time,

Darin

On Fri, 2024-05-03 at 18:07 +0000, Darin via samba
wrote:
> Hello all,
> Does Samba properly support 2012_R2 domains? If so, what is the
> earliest version of Samba AD that supports it? I see that the most
> recent versions support ad dc functional level = 2012_R2 in smb.conf
> but I am unsure if I can safely run 2012_R2 functional level on older
> versions of Samba.
Samba 4.20 is the first to do this with any seriousness.  The option
appeared in Samba 4.19 but much of the features that would imply only
arrived with 4.20.
> A little background:
> In my test environment I setup a Samba 4.20 AD Domain Controller with
> functional level 2012_R2. From there I joined a Windows Server 2022
> to the domain and I forced the activation of the time and sysvol with
> help from this guide: 
>
https://samba.tranquil.it/doc/en/samba_advanced_methods/samba_add_windows_active_directory.html
> 
> As far as I can tell it is working correctly correctly. However, I am
> curious if I can get something similar to this working on something
> more stable than Fedora server.
You may need to find another source for your packages for a current
Samba 4.20 package stream if you want it on an 'enterprise' OS, as most
disable the Samba AD DC.

Andrew Bartlett

-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/Samba Team Member
(since 2001) https://samba.orgSamba Team Lead               
https://catalyst.net.nz/services/sambaCatalyst.Net Ltd
Proudly developing Samba for Catalyst.Net Ltd - a Catalyst IT group
company
Samba Development and Support: https://catalyst.net.nz/services/samba
Catalyst IT - Expert Open Source Solutions