[Samba] Join domain - attribute 'msDS-SupportedEncryptionTypes' does not exist in the specified objectclasses

[Dominic Evans]

On 4 July 2014 13:14, Dominic Evans <oldmanuk at gmail.com> wrote:
> On 4 July 2014 12:00, Andrew Bartlett <abartlet at samba.org> wrote:
>>
>> What version of Windows or Samba does the existing server use, and what
>> version are you joining to, and what function level is the current
>> domain?
>>
>> This looks like a schema issue.  You may wish to join with a lower
>> functional level.
>
> The domain was previously at Windows 2003 server level, but was migrated
back in 2012 to Samba 4 when it was released as stable. The domain
functional level was subsequently raised to 2008 R2 using samba-tool.
>
> Forest function level: (Windows) 2008 R2
> Domain function level: (Windows) 2008 R2
> Lowest function level of a DC: (Windows) 2008 R2
>
> So I presume at this point I cannot join at a lower level because lowest
required is 2008 R2.

Andrew: any thoughts on how I might go about repairing the LDAP schema?

Best regards,
Dominic