[Samba] Is it possible to lower the domain and forest functional level

[Andrew Bartlett]

On Fri, 2018-02-16 at 12:43 +0100, Christophe Borivant wrote:
> Hi Andrew,
> 
> Thanks for your answer. I gave a try with  source4/scripting/bin/samba_upgradeprovision  --full.
> Of course I did it on a virtual machine clone of our dc without network interface.
> 
> The script fails with :
> ../lib/ldb/ldb_tdb/ldb_index.c:1252: unique index violation on objectSid in CN=Account Operators,CN=Builtin,DC=removed,DC=com, conficts with CN=Op?rateurs de compte,CN=Builtin,DC=removed,DC=com in @INDEX:OBJECTSID::AQIAAAAAAAUgAAAAJAIAAA==

Very interesting.  You can see why I don't normally suggest this tool.

> So it seems to be because the account name is french and not English.
> Do you know were I could find those strings to translate ?

You could either rename those system users back to English (for now) in
 the database, or to change the template see the files in setup/ in
your install tree. 

You would notice that skipping --full makes it less aggressive, but
perhaps not enough. 

Finally, you could use the new samba-tool domain schmeaupgrade in Samba
4.8 to try and upgrade the schema using the adprep ldif files (these
are on the web).

I hope this helps,

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba