[Samba] Joining samba4 as a DC to Windows Server 2012 active directory

[Marc Muehlfeld]

Hello Max,

Am 03.02.2015 um 10:13 schrieb Max Luehrig:
>>> It does not work. I get the following error:
>>> DsAddEntry failed with status (5, 'WERR_ACCESS_DENIED') info (8567,
>>> 'WERR_DS_INCOMPATIBLE_VERSION')

A user had the same error yesterday in IRC. His forest functional level
was "2003 interim", which isn't supported. After raising to "2003
native", he could do the join.



>>> Could this be because of the version of AD? I can't find much
>>> around compatibility of this version of Windows. Any help is greatly
>>> appreciated.
>
> We are using Windows 2012 R2 Domain Controller with AD level 2008 R2.

What do you mean by "AD level"? Forest and/or domain level?



And you should check your AD schema version
(https://social.technet.microsoft.com/Forums/windowsserver/en-US/45f8e9b9-07b9-4af7-9eba-d87169dccc22/view-active-directory-schema-version?forum=winserverDS).

If your schema is 56 or higher, then your AD contains schemas from
2012/2012 R2. Samba isn't compatible with this schemas (atm).


Regards,
Marc