[Samba] Joining samba4 as a DC to Windows Server 2012 active directory

Max Lührig max.luehrig at sophistex.com
Wed Feb 4 00:46:37 MST 2015


>Hello Max,
>
>Am 03.02.2015 um 10:13 schrieb Max Luehrig:
>>>> It does not work. I get the following error:
>>>> DsAddEntry failed with status (5, 'WERR_ACCESS_DENIED') info (8567,
>>>> 'WERR_DS_INCOMPATIBLE_VERSION')
>
>A user had the same error yesterday in IRC. His forest functional level
>was "2003 interim", which isn't supported. After raising to "2003
>native", he could do the join.
>
>
>
>>>> Could this be because of the version of AD? I can't find much
>>>> around compatibility of this version of Windows. Any help is greatly
>>>> appreciated.
>>
>>We are using Windows 2012 R2 Domain Controller with AD level 2008 R2.
>
>What do you mean by "AD level"? Forest and/or domain level?
>
>
>
>And you should check your AD schema version
>(https://social.technet.microsoft.com/Forums/windowsserver/en-US/45f8e9b9-07b9-4af7-9eba-d87169dccc22/view-active->directory-schema-version?forum=winserverDS).
>
>If your schema is 56 or higher, then your AD contains schemas from
>2012/2012 R2. Samba isn't compatible with this schemas (atm).
>
>
>Regards,
>Marc

Hi Marc,

I started from a fresh Windows 2012 R2 installation and created a new domain. 

Domain level is: Windows Server 2008 R2
Forest level is: Windows Server 2008

Do you need further information (debug level output)?

Thanks and  appreciate your time,
Max


More information about the samba mailing list