[Samba] how to upgrade schema version?

Christophe Borivant cborivant at devinlec.com
Thu Feb 15 09:03:50 UTC 2018

Hello ,

I did it from schema version 31 to 47.
You'll have to get the ldf files used by adprep.
The files have to be split between updates and adds.
There must be also some syntax changes.
I can send you the resulting files if you want.

You'll also need to manually add some informations in order to be able to join a real windows 2008 R2 controller.
Those informations are :
CN=ActiveDirectoryUpdate,CN=ForestUpdates,cn=configuration,dc=yourdomain,dc=local with the attribute revision set to 5
CN=ActiveDirectoryUpdate,CN=DomainUpdates,CN=System,dc=yourdomain,dc=local with the attribute revision set to 5

As I'm not yet able to join a real windows 2008 R2 controller ( dcpromo fails when trying to replicate the configuration partition ),
 I'm not sure it is enough.

Christophe Borivant
Responsable d'exploitation informatique
+33 5 62 20 71 71 (Poste 503)

Devinlec - Groupe Leclerc

----- Mail original -----
De: "samba" <samba at lists.samba.org>
À: "samba" <samba at lists.samba.org>
Envoyé: Mercredi 14 Février 2018 18:52:46
Objet: Re: [Samba] how to upgrade schema version?

On Wed, 14 Feb 2018 18:27:20 +0100
Peter Schmidt via samba <samba at lists.samba.org> wrote:

> Hi!
> I'm running samba 4.3.11 on Ubuntu server Xenial. It's the only AD-DC
> in a windows domain that used to be hosted by a single Win2k3 server.
> The AD schema version is 30, the functionality level is already
> raised to 2008_R2 (domain) and 2008 (forest).
> ~# ldbsearch -H /var/lib/samba/private/sam.ldb -b 
> 'cn=Schema,cn=Configuration,dc=domain,dc=com' -s base objectVersion
> # record 1
> dn: CN=Schema,CN=Configuration,DC=vswest,DC=intern
> objectVersion: 30
> Now I cannot access the Domain Controllers via RSAT and the logs show 
> "cannot find attr[msDS-isRODC] in of schema".
> How do I upgrade the schema?

This has happened before, see here:


Don't know if it will help though, you need the schema ldifs


To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list