[Samba] Raising Domain Level
abartlet at samba.org
Thu Apr 12 03:25:30 UTC 2018
On Thu, 2018-04-12 at 11:45 +1000, David Minard via samba wrote:
> G'day All,
> We are trying to raise the level of our test samba4 DCs. Our windows
> dude wants the Domain level to be 2012_R2.
> I am referencing:
> We managed to get both domain and forest levels to 2008 R2 - forest was
> However, when we try to raise further, we are getting what seems to be
> a chicken and egg issue.
> # samba-tool domain level raise --domain-level=2012_R2
> ERROR: Domain function level can't be higher than the lowest function
> level of a DC!
> # samba-tool domain level raise --forest-level=2012_R2
> ERROR: Forest function level can't be higher than the domain function
> level(s). Please raise it/them first!
> Am I missing something?
We don't support FL 2012 (or 2012R2 yet). We have code to prepare the
domain for it, but we don't have the Kerberos features that it implies.
I hope this clarifies things,
Authentication Developer, Samba Team https://samba.org
Samba Development and Support, Catalyst IT
More information about the samba