similar to: Is it possible to lower the domain and forest functional level

I don't know exactly, but there were problems with indexes ( as the user said ). We did not try with the current release and our manager wants to go back to Microsoft :-( Our samba version is 4.7.5. I've been able to go one step further. We first were not able to join a Windows 2008 R2 as a domain controller because it was asking for adprep. I found the missing datas in the ldap and added

Hi Denis, We are using the latest version of sharepoint. samba-tool domain level show : Domain and forest function level for domain 'DC=removed,DC=com' Forest function level: (Windows) 2008 R2 Domain function level: (Windows) 2008 R2 Lowest function level of a DC: (Windows) 2008 R2 I did not have to change the revision attributes by hand. I think the MSAD2K3 was an upgrade from MSAD2K.

Hello Denis, I checked all the attributes and objectclass defined in /usr/share/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Attributes.txt and /usr/share/samba/setup/ad-schema/MS-AD_Schema_2K8_R2_Classes.txt exists in my samba 4 ldap. Nothing is missing. Can you give me some inputs to "recreate a Samba 4.7 domain with same SID by piping in all the objects" ?

Ok I did the test of joining a new samba 4.7.5 as a domain controller. Unfortunatly we have the exact same error using dcpromo ! So now I need help to "recreate a Samba 4.7 domain with same SID by piping in all the objects". --------------------------------------------- Christophe Borivant Responsable d'exploitation informatique +33 5 62 20 71 71 (Poste 503) Devinlec - Groupe

Hi Christophe, > I don't know exactly, but there were problems with indexes ( as the user said ). since you have issues with your domain, perhaps fixing you domain would fix the sharepoint compatibility. What version of sharepoint are you trying to integrate? > We did not try with the current release and our manager wants to go back to Microsoft :-( > Our samba version is 4.7.5.

Hello , I did it from schema version 31 to 47. You'll have to get the ldf files used by adprep. The files have to be split between updates and adds. There must be also some syntax changes. I can send you the resulting files if you want. You'll also need to manually add some informations in order to be able to join a real windows 2008 R2 controller. Those informations are :

Hi Andrew, Thanks for your answer. I gave a try with source4/scripting/bin/samba_upgradeprovision --full. Of course I did it on a virtual machine clone of our dc without network interface. The script fails with : ../lib/ldb/ldb_tdb/ldb_index.c:1252: unique index violation on objectSid in CN=Account Operators,CN=Builtin,DC=removed,DC=com, conficts with CN=Op?rateurs de

https://lists.samba.org/archive/samba/2015-August/193258.html and https://lists.samba.org/archive/samba/2015-December/196850.html --------------------------------------------- Christophe Borivant Responsable d'exploitation informatique +33 5 62 20 71 71 (Poste 503) Devinlec - Groupe Leclerc -------------------------------------------- ----- Mail original ----- De: "samba"

I've found a solution. The samba ldap was missing 2 information to allow a windows 2008 R2 to join the domain as a secondary controller. Those informations were : CN=ActiveDirectoryUpdate,CN=ForestUpdates,cn=configuration,dc=yourdomain,dc=local with the attribute revision set to 5 and CN=ActiveDirectoryUpdate,CN=DomainUpdates,CN=System,dc=yourdomain,dc=local with the attribute revision set to

You should run : ldbsearch -H /var/lib/samba/private/sam.ldb -b "CN=msSFU-30-Mail-Aliases,CN=Schema,CN=Configuration,DC=MYDOMAIN,DC=com" -s base possSuperiors If the result is : # record 1 dn: CN=msSFU-30-Mail-Aliases,CN=Schema,CN=Configuration,DC=DEVINLECLECLERC,DC=com possSuperiors: container possSuperiors: domainDNS possSuperiors: nisMap Then it's OK, the script tried to add a

msDS-isRODC is introduced in version 32 of the schema. This is the problem I faced. You can have a look to https://lists.samba.org/archive/samba/2015-August/193258.html. --------------------------------------------- Christophe Borivant Responsable d'exploitation informatique +33 5 62 20 71 71 (Poste 503) Devinlec - Groupe Leclerc -------------------------------------------- ----- Mail

Hi Andrew, Thanks to your input, I've been able to run the samba_upgradeprovision script. But the full oprion fails with : Creating a reference provision WARNING: no network interfaces found No IPv4 address will be assigned WARNING: no network interfaces found No IPv6 address will be assigned Update base samdb by searching difference with reference one Starting update of samdb There are 125

Ok it seems like you are in the exact same situation I was. So here are the files in a tgz. Once uncompressed, you'll have to change each occurance of "DC=MYDOMAIN,DC=com" according to your configuration. you can do this with something like : perl -pi -e 's/DC=MYDOMAIN,DC=com/DC=Carlos,DC=com/g' * Then you will have to run ldbadd and ldbmodify in the correct order to upgrade

Hello Carlos, I had the same problem as you. To solve the problem, I just modified the files I needed from adprep in order to be able to run ldbadd and ldbmodify. Can you run something like this to check your schema version ? ldbsearch -H /var/lib/samba/private/sam.ldb -b "CN=Schema,CN=Configuration,DC=YOURDOMAIN,DC=com" -s base objectVersion

I made a try translating the group names one by one in the setup/provision_users.ldif file. The first groups went OK but when I translate "Incoming Forest Trust Builders" by "Générateurs d'approbations de forêt entrante", I get this error from the script : Traceback (most recent call last): File "source4/scripting/bin/samba_upgradeprovision", line 1714, in

Hi! I'm running samba 4.3.11 on Ubuntu server Xenial. It's the only AD-DC in a windows domain that used to be hosted by a single Win2k3 server. The AD schema version is 30, the functionality level is already raised to 2008_R2 (domain) and 2008 (forest). ~# ldbsearch -H /var/lib/samba/private/sam.ldb -b 'cn=Schema,cn=Configuration,dc=domain,dc=com' -s base objectVersion #

Hello, We achieved our Domain Migration from Windows 2003 R2 server to Samba 4.2.3 (sernet binaries). Now Samba 4 is the only domain controller. When we use ADUC and click on Domain Controllers we have an error. At the same time if we have a look at de syslog messages on the server, we can see "ldb: acl_read: CN=SERVER,OU=Domain Controllers,DC=DOMAIN,DC=com cannot find attr[msDS-isRODC] in

I understand but do you think the work will be done to make it compatible again ? If not, there should be a statement in the changelog about this broken compatibility. Christophe Borivant ----- Mail original ----- De: "Andrew Bartlett" <abartlet at samba.org> À: "Christophe BORIVANT" <cborivant at devinlec.com>, "samba" <samba at lists.samba.org>

Ok, for what i understand, this is a compatibility issue with python 2.6. This seems to be in relation with Dict Comprehensions (https://www.python.org/dev/peps/pep-0274/). So yet, samba 4.8 cannot run on any rhel 6 like distribution. Was it intended ? Christophe Borivant ----- Mail original ----- De: "samba" <samba at lists.samba.org> À: "samba" <samba at

On Wed, 2018-02-14 at 11:14 +0100, Christophe Borivant wrote: > I don't know exactly, but there were problems with indexes ( as the user said ). > We did not try with the current release and our manager wants to go back to Microsoft :-( > Our samba version is 4.7.5. OK, that is the current release. The last changes targeted at sharepoint where a couple of years ago. > I've