[Samba] [External] - Re: Joining Windows Server 2022 to Samba Domain

[Andrew Bartlett]

I would suggest it is safer to run Samba from 'git master' than to
'hack' the schema version, as if that number is wrong it is harder to
get the schema really upgraded to that version later.

Then I would over the next few months upgrade to Samba 4.19rc0 as that
comes out, and follow the release candidates out to the final release.
 Our CI and code review is pretty tight, and you are pretty experienced
so you should be able to handle any issues.

Another option would be to do that upgrade of the schema version, then
downgrade Samba back to the most recent release version, but this won't
really make that big of a difference.

Andrew Bartlett

On Mon, 2023-05-15 at 16:39 +0000, Dawson Greeley via samba wrote:
> Thanks Andrew! Do you happen to have any ideas of any ill-effects
> with the 'hack' to get to schema 88? I'm just trying to better
> understand if it is better to wait till the 4.19 release than use the
> hack and see if I can apply the ldif files manually
> ________________________________
> From: samba <
> samba-bounces at lists.samba.org
> > on behalf of Andrew Bartlett via samba <
> samba at lists.samba.org
> >
> Sent: Thursday, May 11, 2023 4:56 AM
> To: 
> samba at lists.samba.org
>  <
> samba at lists.samba.org
> >
> Subject: Re: [Samba] [External] - Re: Joining Windows Server 2022 to
> Samba Domain
> 
> On Thu, 2023-05-11 at 08:29 +0100, Rowland Penny via samba wrote:
> > On 11/05/2023 06:47, Andrew Bartlett wrote:
> > > This was always hoped to be possible.  We got stuck a bit at
> > > 2012R2
> > > because Microsoft was checking us out via DCOM if we didn't have
> > > Samba
> > > already filled with the adprep data for 2012R2, which is a big
> > > part of
> > > why that work was done years ago.
> > > 
> > > That got fixed after we mentioned it.
> > > 
> > > We don't do a lot of testing with Windows joining Samba, just
> > > because
> > > it is a pain to automate, but it is expected to work and I would
> > > love
> > > to see more testing and bug reports with modern versions.
> > > 
> > > Recently (to be released with Samba 4.19) schema and tools to
> > > upgrade
> > > the schema were improved to the 2019 level, which should remove
> > > some of
> > > the hack steps in this guide.
> > > 
> > > Andrew Bartlett
> > > 
> > 
> > You would like people to test things they know nothing about ?
> > Have you considered telling people what is available ?
> 
> I've
> updated 
> https://wiki.samba.org/index.php/Joining_a_Windows_Server_2012_
> 
> /_2012_R2_DC_to_a_Samba_AD which was written at the time of the
> previous development effort.
> 
> We do benefit significantly from curious users who try things that
> might be possible and let us know, or even better write up wiki
> pages.
> 
> As a broader note, we have some great pages on the wiki about
> integrating Samba with other tools and I would love to see more.
> 
> > Why do I feel like getting information out of Samba is like getting
> > teeth pulled ?
> 
> I'll gladly answer any polite and respectful questions on Samba,
> particularly as an AD DC, but have many completing calls on my time.
> 
> > I notice that MR !3080 has popped up on this very subject.
> 
> This is actually for the reverse, it will allow Samba to join a
> Windows
> 2012R2 or 2016 functional level domain when merged, both for testing
> and for those needing migration.  We continue to work to finish the
> 2012R2 and 2016 features.
> 
> Andrew Bartlett
> 
> --
> Andrew Bartlett (he/him)        
> https://samba.org/~abartlet/
> 
> Samba Team Member (since 2001)  
> https://samba.org
> 
> Samba Developer, Catalyst IT    
> https://catalyst.net.nz/services/samba
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  
> https://lists.samba.org/mailman/options/samba
> 
-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst.Net Limited

Catalyst.Net Ltd - a Catalyst IT group company - Expert Open Source
Solutions