Re: Attribut msDS-KeyCredentialLink is missing

Hello,
Well, I have trying to upgrade manually the schema with the file AD_DS_Attr=
ibutes_Windows_Server_2016.ldf and I have an error. I think it is for that =
the upgrade doesn't pass... :

# samba-tool domain schemaupgrade --ldf-file=3D/usr/share/samba/setup/ad-sc=
hema/AD_DS_Attributes__Windows_Server_2016.ldf -v
Applying /usr/share/samba/setup/ad-schema/AD_DS_Attributes__Windows_Server_=
2016.ldf updates..                                                         =
                                       .
Exception: 'utf-8' codec can't decode byte 0x92 in position 854: invalid st=
art byte
Error encountered, aborting schema upgrade
ERROR: Failed to upgrade schema


Bruno MOREL
Administrateur syst=E8mes et r=E9seaux

-----Message d'origine-----
De=A0: samba <[email protected]> De la part de Rowland Penny vi=
a samba
Envoy=E9=A0: jeudi 11 juin 2026 15:00
=C0=A0: [email protected]
Cc=A0: Rowland Penny <[email protected]>
Objet=A0: Re: [Samba] Attribut msDS-KeyCredentialLink is missing

On Thu, 11 Jun 2026 12:31:17 +0000
Bruno MOREL <[email protected]> wrote:

> Hi Rowland,
> Since my mail, I have created this entry because it was missing.

But why was it missing and what else isn't there ?

> But now nothing appends when I configure my hello profile on my =

> computer. Maybe something else is missing?

Not sure, does the 'hello profile' rely on code that Windows has but Samba =
doesn't ?

> How did you update from 4.23.x to 4.24.x ?
> =3D> just changing the source list from 4.23 to 4.24, I'm using =

> tranquil.it source and I upgraded from 4.23.7 to 4.24.3

Then you probably should have the required ldifs to upgrade the functional =
level correctly.

I have just checked the Samba 4.24.3 tarball and the attribute is there in =
source4/setup/ad-schema/AD_DS_Attributes_Windows_Server_2016.ldf

It should also be in:
/usr/share/samba/setup/ad-schema/AD_DS_Attributes__Windows_Server_2016.ldf
On the DC

>On what OS
> and where did the packages come from ? =3D> On Debian 13.

Hmm, I use Debian 13 with Samba from backports and I do have that
attribute:

sudo samba -V
Version 4.24.3-Debian-4.24.3+dfsg-1~bpo13+1

Rowland

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- =

To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba