>From 9f228daebca4f9917f3a3d1575806de0a38b4782 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Wed, 27 Aug 2014 17:21:26 +0200 Subject: [PATCH 2/3] LDAP: Fall back to functional level of Windows Server 2003 The newest functional level we branch for is currently DS_BEHAVIOR_WIN2003. Therefore (and also because extended support for Windows server 2003 ends in 2015) we can safely set the functional level to 2003 if the attribute is present but not a known value. --- src/providers/ldap/sdap.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/providers/ldap/sdap.c b/src/providers/ldap/sdap.c index 56faf51239a8fccb807421f17094f5ba2e17fd35..f2178dd0ad9a318e6c3ae820a1c7812b353780bc 100644 --- a/src/providers/ldap/sdap.c +++ b/src/providers/ldap/sdap.c @@ -1196,7 +1196,8 @@ int sdap_get_server_opts_from_rootdse(TALLOC_CTX *memctx, default: DEBUG(SSSDBG_MINOR_FAILURE, "Received invalid value for AD compatibility level. " - "Continuing without AD performance enhancements\n"); + "Using the lowest-common compatibility level\n"); + opts->dc_functional_level = DS_BEHAVIOR_WIN2003; } } else if (ret != ENOENT) { DEBUG(SSSDBG_MINOR_FAILURE, -- 1.9.3