[Samba] [External] - Re: Joining Windows Server 2022 to Samba Domain

[Dawson Greeley]

Thanks Andrew! Do you happen to have any ideas of any ill-effects with the 'hack' to get to schema 88? I'm just trying to better understand if it is better to wait till the 4.19 release than use the hack and see if I can apply the ldif files manually
________________________________
From: samba <samba-bounces at lists.samba.org> on behalf of Andrew Bartlett via samba <samba at lists.samba.org>
Sent: Thursday, May 11, 2023 4:56 AM
To: samba at lists.samba.org <samba at lists.samba.org>
Subject: Re: [Samba] [External] - Re: Joining Windows Server 2022 to Samba Domain

On Thu, 2023-05-11 at 08:29 +0100, Rowland Penny via samba wrote:
>
> On 11/05/2023 06:47, Andrew Bartlett wrote:
> >
> > This was always hoped to be possible.  We got stuck a bit at 2012R2
> > because Microsoft was checking us out via DCOM if we didn't have Samba
> > already filled with the adprep data for 2012R2, which is a big part of
> > why that work was done years ago.
> >
> > That got fixed after we mentioned it.
> >
> > We don't do a lot of testing with Windows joining Samba, just because
> > it is a pain to automate, but it is expected to work and I would love
> > to see more testing and bug reports with modern versions.
> >
> > Recently (to be released with Samba 4.19) schema and tools to upgrade
> > the schema were improved to the 2019 level, which should remove some of
> > the hack steps in this guide.
> >
> > Andrew Bartlett
> >
>
> You would like people to test things they know nothing about ?
> Have you considered telling people what is available ?

I've
updated https://wiki.samba.org/index.php/Joining_a_Windows_Server_2012_
/_2012_R2_DC_to_a_Samba_AD which was written at the time of the
previous development effort.

We do benefit significantly from curious users who try things that
might be possible and let us know, or even better write up wiki pages.

As a broader note, we have some great pages on the wiki about
integrating Samba with other tools and I would love to see more.

> Why do I feel like getting information out of Samba is like getting
> teeth pulled ?

I'll gladly answer any polite and respectful questions on Samba,
particularly as an AD DC, but have many completing calls on my time.

> I notice that MR !3080 has popped up on this very subject.

This is actually for the reverse, it will allow Samba to join a Windows
2012R2 or 2016 functional level domain when merged, both for testing
and for those needing migration.  We continue to work to finish the
2012R2 and 2016 features.

Andrew Bartlett

--
Andrew Bartlett (he/him)        https://samba.org/~abartlet/
Samba Team Member (since 2001)  https://samba.org
Samba Developer, Catalyst IT    https://catalyst.net.nz/services/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba