similar to: Is it possible to lower the domain and forest functional level

Ok I did the test of joining a new samba 4.7.5 as a domain controller. Unfortunatly we have the exact same error using dcpromo ! So now I need help to "recreate a Samba 4.7 domain with same SID by piping in all the objects". --------------------------------------------- Christophe Borivant Responsable d'exploitation informatique +33 5 62 20 71 71 (Poste 503) Devinlec - Groupe

https://lists.samba.org/archive/samba/2015-August/193258.html and https://lists.samba.org/archive/samba/2015-December/196850.html --------------------------------------------- Christophe Borivant Responsable d'exploitation informatique +33 5 62 20 71 71 (Poste 503) Devinlec - Groupe Leclerc -------------------------------------------- ----- Mail original ----- De: "samba"

Hello Denis, I checked all the attributes and objectclass defined in /usr/share/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Attributes.txt and /usr/share/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Classes.txt exists in my samba 4 ldap. Nothing is missing. Can you give me some inputs to "recreate a Samba 4.7 domain with same SID by piping in all the objects" ?

You can also look in the mailing list archive. there are informations around august 2015. --------------------------------------------- Christophe Borivant Responsable d'exploitation informatique +33 5 62 20 71 71 (Poste 503) Devinlec - Groupe Leclerc -------------------------------------------- ----- Mail original ----- De: "samba" <samba at lists.samba.org> Cc:

Hi Denis, We are using the latest version of sharepoint. samba-tool domain level show : Domain and forest function level for domain 'DC=removed,DC=com' Forest function level: (Windows) 2008 R2 Domain function level: (Windows) 2008 R2 Lowest function level of a DC: (Windows) 2008 R2 I did not have to change the revision attributes by hand. I think the MSAD2K3 was an upgrade from MSAD2K.

Hello , I did it from schema version 31 to 47. You'll have to get the ldf files used by adprep. The files have to be split between updates and adds. There must be also some syntax changes. I can send you the resulting files if you want. You'll also need to manually add some informations in order to be able to join a real windows 2008 R2 controller. Those informations are :

Hi Christophe, > I don't know exactly, but there were problems with indexes ( as the user said ). since you have issues with your domain, perhaps fixing you domain would fix the sharepoint compatibility. What version of sharepoint are you trying to integrate? > We did not try with the current release and our manager wants to go back to Microsoft :-( > Our samba version is 4.7.5.

I don't know exactly, but there were problems with indexes ( as the user said ). We did not try with the current release and our manager wants to go back to Microsoft :-( Our samba version is 4.7.5. I've been able to go one step further. We first were not able to join a Windows 2008 R2 as a domain controller because it was asking for adprep. I found the missing datas in the ldap and added

Hi Andrew, Thanks for your answer. I gave a try with source4/scripting/bin/samba_upgradeprovision --full. Of course I did it on a virtual machine clone of our dc without network interface. The script fails with : ../lib/ldb/ldb_tdb/ldb_index.c:1252: unique index violation on objectSid in CN=Account Operators,CN=Builtin,DC=removed,DC=com, conficts with CN=Op?rateurs de

Hello! Command output mainly seemed OK. ldbsearch -H /var/lib/samba/private/sam.ldb -b "CN = msSFU-30-Mail-Aliases, CN = Schema, CN = Configuration, DC = MYDOMAIN" -s base possSuperiors # 1 record dn: CN = msSFU-30-Mail-Aliases, CN = Schema, CN = Configuration, DC = Internal, DC = MYDOMAIN possSuperiors: domainDNS possSuperiors: nismap possSuperiors: container # Returned 1 records

Hello all, We have a samba 4 domain controller. The domain controller was at first a secondary domain controller. We joined it to a domain were the first controller was a windows 2003 server. Then we have transfer the fsmo roles to the linux controller and demote the 2003 server. I then ran all the ldf files from the 2008 R2 dcpromo and raised the functional levels. Now we need to go back to

OK, ii see this then thank you . Executed the process ldbadd / ldbmodify and me only generated an error ldbmodify -H /var/lib/samba/private/sam.ldb '--option = DSDB: update schema allowed = true' sch40mod.ldf ERR: (Attribute or value exists) "attribute 'possSuperiors': value # 0 on 'CN = msSFU-30-Mail-Aliases, CN = Schema, CN = Configuration, DC = Internal, DC =

Hi Andrew, Thanks to your input, I've been able to run the samba_upgradeprovision script. But the full oprion fails with : Creating a reference provision WARNING: no network interfaces found No IPv4 address will be assigned WARNING: no network interfaces found No IPv6 address will be assigned Update base samdb by searching difference with reference one Starting update of samdb There are 125

You should run : ldbsearch -H /var/lib/samba/private/sam.ldb -b "CN=msSFU-30-Mail-Aliases,CN=Schema,CN=Configuration,DC=MYDOMAIN,DC=com" -s base possSuperiors If the result is : # record 1 dn: CN=msSFU-30-Mail-Aliases,CN=Schema,CN=Configuration,DC=DEVINLECLECLERC,DC=com possSuperiors: container possSuperiors: domainDNS possSuperiors: nisMap Then it's OK, the script tried to add a

msDS-isRODC is introduced in version 32 of the schema. This is the problem I faced. You can have a look to https://lists.samba.org/archive/samba/2015-August/193258.html. --------------------------------------------- Christophe Borivant Responsable d'exploitation informatique +33 5 62 20 71 71 (Poste 503) Devinlec - Groupe Leclerc -------------------------------------------- ----- Mail

I made a try translating the group names one by one in the setup/provision_users.ldif file. The first groups went OK but when I translate "Incoming Forest Trust Builders" by "Générateurs d'approbations de forêt entrante", I get this error from the script : Traceback (most recent call last): File "source4/scripting/bin/samba_upgradeprovision", line 1714, in

Okay, I'm already riding the test base ... thank you Leveraging believe may be related, when access peo UDCA part of Domains Controller, I can think of error and logs appears: [12/30/2015 08: 55: 52.277383, 0] ../lib/ldb-samba/ldb wrap.c: 72 (ldb wrap debug) ldb: acl_read: CN = DC-LINUX, OU = Domain Controllers, DC = Internal, DC = MYDOMAIN can not find attr [msDS-isRODC] in schema of It

Ok it seems like you are in the exact same situation I was. So here are the files in a tgz. Once uncompressed, you'll have to change each occurance of "DC=MYDOMAIN,DC=com" according to your configuration. you can do this with something like : perl -pi -e 's/DC=MYDOMAIN,DC=com/DC=Carlos,DC=com/g' * Then you will have to run ldbadd and ldbmodify in the correct order to upgrade

Hello Carlos, I had the same problem as you. To solve the problem, I just modified the files I needed from adprep in order to be able to run ldbadd and ldbmodify. Can you run something like this to check your schema version ? ldbsearch -H /var/lib/samba/private/sam.ldb -b "CN=Schema,CN=Configuration,DC=YOURDOMAIN,DC=com" -s base objectVersion

Good day! Thank you for your attention, follow the process and led to this result: ldbsearch -H /usr/local/samba/private/sam.ldb -b "CN = Schema, CN = Configuration, DC = MYDOMAIN" -s base objectVersion # 1 record dn: CN = Schema, CN = Configuration, DC = MYDOMAIN objectVersion: 31 # Returned 1 records # 1 entries # 0 referrals How can we proceed ? Thanks Em 30-12-2015 07:54,