[Samba] Samba 4.14 upgrade schema to 2012_R2 error

[Andrew Bartlett]

On Thu, 2021-10-07 at 10:54 +0200, L.P.H. van Belle via samba wrote:
> 
> samba-tool domain level --forest-level=2012_R2 raise
> 
> ERROR: Forest function level can't be higher than the domain function
> level(s). Please raise it/them first!
> 
>  
> 
> samba-tool domain level --domain-level=2012_R2 raise
> 
> ERROR: Domain function level can't be higher than the lowest function
> level of a DC!
> 
> Now i might be hitting an old bug since my AD exists since 4.1.x 
> 
> Not sure on that, if i have the time today i'll have a look at this. 
> 
> Or.. maybe Rowland knows ;-)  

Samba can prepare for FL 2012, which was needed at some point due to
bugs in 2012 joining us even for downlevel operation, but we can't be
FL 2012 truthfully (if we have to lie at some point we will, but
ideally we act with integrity).

We are missing FL 2012 required features like Kerberos FAST and Claims
for example.

There is a plan to upgrade Heimdal in place, the expectation is that we
will get Kerberos FAST support before 4.16.

Andrew Bartlett

-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions