'net vampire' doesn't work

[cd1]

hi,

I'm trying to run the 'vampire' operation on the latest Samba 4 code but it
doesn't work. it used to work until some weeks ago...

here's the command I execute:

$ sudo bin/net vampire -Uadministrator%p3ngu1N adinterop.ltc.virtual -d4

and here's the error output:

...
ldb_wrap open of ldap://WIN-K94KJ2DRGPG
added interface ip=143.106.167.155 nmask=255.255.255.224
added interface ip=143.106.167.155 nmask=255.255.255.224
ldb_wrap open of ldap://WIN-K94KJ2DRGPG.adinterop.ltc.virtual/
The servers function level 0 is below 'ads:min function level' of 2
libnet_BecomeDC() failed - NT_STATUS_NOT_SUPPORTED
return code = -1

WIN-K94KJ2DRGPG is a virtual Windows 2008 Server setup as a PDC and that's
what I'm trying to vampire from.

what am I doing wrong?

--
Crístian Deives dos Santos Viana [aka CD1]
Sent from Campinas, São Paulo, Brazil

[cd1]

with a help from the guys here, we found out by the message:

The servers function level 0 is below 'ads:min function level' of 2

that the problem was the forest functional level of my Windows server, which
was too low (Windows 2000). I set both the {domain,forest} functional levels
to Windows 2003 and it worked.

thanks anyway!

2009/11/3 Crístian Viana <cristiandeives@...>

> hi,
>
> I'm trying to run the 'vampire' operation on the latest Samba 4 code but it
> doesn't work. it used to work until some weeks ago...
>
> here's the command I execute:
>
> $ sudo bin/net vampire -Uadministrator%p3ngu1N adinterop.ltc.virtual -d4
>
> and here's the error output:
>
> ...
> ldb_wrap open of ldap://WIN-K94KJ2DRGPG
> added interface ip=143.106.167.155 nmask=255.255.255.224
> added interface ip=143.106.167.155 nmask=255.255.255.224
> ldb_wrap open of ldap://WIN-K94KJ2DRGPG.adinterop.ltc.virtual/
> The servers function level 0 is below 'ads:min function level' of 2
> libnet_BecomeDC() failed - NT_STATUS_NOT_SUPPORTED
> return code = -1
>
> WIN-K94KJ2DRGPG is a virtual Windows 2008 Server setup as a PDC and that's
> what I'm trying to vampire from.
>
> what am I doing wrong?
>
> --
> Crístian Deives dos Santos Viana [aka CD1]
> Sent from Campinas, São Paulo, Brazil
>

--
Crístian Deives dos Santos Viana [aka CD1]

[Andrew Bartlett]

On Tue, 2009-11-03 at 15:47 -0200, Crístian Viana wrote:
> with a help from the guys here, we found out by the message:
>
> The servers function level 0 is below 'ads:min function level' of 2
>
> that the problem was the forest functional level of my Windows server, which
> was too low (Windows 2000). I set both the {domain,forest} functional levels
> to Windows 2003 and it worked.

We may remove this limitation in future - and you can adjust it in the
smb.conf - but this was simply a warning that we test mostly with
Windows 2003 and Windows 2008 functional level domains.

Andrew Bartlett

--
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

[cd1]

thanks Andrew, that's nice to know!

2009/11/3 Andrew Bartlett <abartlet@...>

> On Tue, 2009-11-03 at 15:47 -0200, Crístian Viana wrote:
> > with a help from the guys here, we found out by the message:
> >
> > The servers function level 0 is below 'ads:min function level' of 2
> >
> > that the problem was the forest functional level of my Windows server,
> which
> > was too low (Windows 2000). I set both the {domain,forest} functional
> levels
> > to Windows 2003 and it worked.
>
> We may remove this limitation in future - and you can adjust it in the
> smb.conf - but this was simply a warning that we test mostly with
> Windows 2003 and Windows 2008 functional level domains.
>
> Andrew Bartlett
>
> --
> Andrew Bartlett                                http://samba.org/~abartlet/
> Authentication Developer, Samba Team           http://samba.org
> Samba Developer, Cisco Inc.
>
>

--
Crístian Deives dos Santos Viana [aka CD1]
Sent from Campinas, SP, Brazil