[Samba] Error encountered, aborting schema upgrade

[Michael Thiemann]

> Is this an existing domain or a new domain ?
It is an existing domain (productive for about 15 years)

> Did you check if the schema needs upgrading ?
As I told before, it's currently at 69
root at TUX:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b
'cn=Schema,cn=Configuration,dc=briesebaer,dc=intern' -s base objectVersion
# record 1
dn: CN=Schema,CN=Configuration,DC=briesebaer,DC=intern
objectVersion: 69

# returned 1 records
# 1 entries
# 0 referrals

> If this is a new domain, it is probably at '88' already.
> But even if it does require upgrading, when has something existing been an
> error ?
I don't know. I hope to get the answer here.

Michael

-----Ursprüngliche Nachricht-----
Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland Penny via
samba
Gesendet: Donnerstag, 5. September 2024 09:42
An: samba at lists.samba.org
Cc: Rowland Penny <rpenny at samba.org>
Betreff: Re: [Samba] Error encountered, aborting schema upgrade

On Wed, 4 Sep 2024 14:49:53 +0200
Michael Thiemann via samba <samba at lists.samba.org> wrote:

> Dear all,
> I'm using SAMBA 4.20.4 running on actual Debian bookworm.
> At the moment the directory Schema Version 69 is in use.

Is this an existing domain or a new domain ?
> 
> Trying to make a schemaupgrade brings the following error.
> root at TUX:/# samba-tool domain schemaupgrade Temporarily overriding 
> 'dsdb:schema update allowed' setting Applying Sch70.ldf updates...
> Unable to find attribute msDS-DeviceMDMStatus in the schema
> 5 changes applied
> Applying Sch71.ldf updates...
> 7 changes applied
> Applying Sch72.ldf updates...
> Exception: (68, 'Entry
> CN=ms-DS-External-Directory-Object-Id,CN=Schema,CN=Configuration,DC=br
> iesebaer,DC=intern already exists') Encountered while trying to apply 
> the following LDIF
> ----------------------------------------------------
> dn: 
> CN=ms-DS-External-Directory-Object-Id,CN=Schema,CN=Configuration,DC=br
> iesebaer,DC=intern
> changetype: add
> objectClass: attributeSchema
> adminDisplayName: ms-DS-External-Directory-Object-Id
> adminDescription: ms-DS-External-Directory-Object-Id
> ldapDisplayName: msDS-ExternalDirectoryObjectId
> attributeSecurityGuid:: hri1d0qU0RGuvQAA+ANnwQ==
> attributeId: 1.2.840.113556.1.4.2310
> attributeSyntax: 2.5.5.12
> omSyntax: 64
> isMemberOfPartialAttributeSet: TRUE
> isSingleValued: TRUE
> instanceType: 4
> rangeUpper: 256
> schemaIdGuid:: kL8pva1m4UCIexDfBwQZpg==
> searchFlags: 9
> showInAdvancedViewOnly: FALSE
> systemOnly: FALSE
> systemFlags: 16
> 
> Exception: (68, 'Entry
> CN=ms-DS-External-Directory-Object-Id,CN=Schema,CN=Configuration,DC=br
> ieseba
> er,DC=intern already exists')
> Error encountered, aborting schema upgrade
> 
> ERROR: Failed to upgrade schema
> Any idea to solve this problem?
> Regards Michael

Did you check if the schema needs upgrading ?
If this is a new domain, it is probably at '88' already.
But even if it does require upgrading, when has something existing been an
error ?

Rowland



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba