[Samba] Is it possible to lower the domain and forest functional level
abartlet at samba.org
Fri Feb 16 17:49:08 UTC 2018
On Fri, 2018-02-16 at 12:43 +0100, Christophe Borivant wrote:
> Hi Andrew,
> Thanks for your answer. I gave a try with source4/scripting/bin/samba_upgradeprovision --full.
> Of course I did it on a virtual machine clone of our dc without network interface.
> The script fails with :
> ../lib/ldb/ldb_tdb/ldb_index.c:1252: unique index violation on objectSid in CN=Account Operators,CN=Builtin,DC=removed,DC=com, conficts with CN=Op?rateurs de compte,CN=Builtin,DC=removed,DC=com in @INDEX:OBJECTSID::AQIAAAAAAAUgAAAAJAIAAA==
Very interesting. You can see why I don't normally suggest this tool.
> So it seems to be because the account name is french and not English.
> Do you know were I could find those strings to translate ?
You could either rename those system users back to English (for now) in
the database, or to change the template see the files in setup/ in
your install tree.
You would notice that skipping --full makes it less aggressive, but
perhaps not enough.
Finally, you could use the new samba-tool domain schmeaupgrade in Samba
4.8 to try and upgrade the schema using the adprep ldif files (these
are on the web).
I hope this helps,
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
More information about the samba