[Samba] Problem joining domain [SEC=UNCLASSIFIED]

[Rowland penny]

On 13/06/2019 08:33, Thamm, Russell wrote:
> UNCLASSIFIED
>
> Hi Rowland
>
> No tombstonelifetime.
>
> Do I need to upgrade the schema? The current schema is 30 (Windows 2003).
>
> When I try to update the schema, I get the following error:
>
> Applying Sch31.ldf updates...
> Exception [Errno 2] No such file or directory
>
> I downloaded sch31.ldf and tried to apply that.
>
> samba-tool domain schemaupgrade --ldf-file=sch31.ldf --base-dir=/home/user/work/ldif
>
> Unable to find attribute 1.2.840.113556.1.6.13.3.2 in the schema.
> Exception: unable to parse LDIF string at first chunk
>
> Not sure if I'm barking up the wrong tree.

Right tree, possibly wrong bark ;-)

Have a look here:

https://lists.samba.org/archive/samba/2015-December/196883.html

>
> Cheers
> Russell
>
> UNCLASSIFIED
>
> Sorry to be a bloody pest, but I've hit a new problem.
>
> I shutdown the 2003 server & seized the roles. I then upgraded to samba 4.7.12. and demoted the 2003 server.
I totally missed that you started with 2003, which uses schema 31, Samba 
uses 47
>
> Everything seemed to be working OK for several days, so I upgraded to 4.8.12.
>
>
> IMPORTANT: This email remains the property of the Department of Defence and is subject to the jurisdiction of section 70 of the Crimes Act 1914. If you have received this email in error, you are requested to contact the sender and delete the email.

I love things like the above, why do people add things like that ? they 
are totally unenforceable ;-)

Rowland