When attempting to upgrade from Windows Services for UNIX 3.0 to Windows Services for UNIX 3.5 on Windows Server 2003, you receive an error like:
Error when upgrading NIS Schema. Please look at the log file at:
C:\Documents and Settings\Administrator\Local Settings\Temp\sfusch.log for more details on the error.
NOTE: The installation rolls back to version 3.0.
The sfusch.log file contains entries like:
SFUSCH.log Start of schema extension. Time: Mon Aug 28 07:38:35 2006 Schema Naming Context 'CN=Schema,CN=Configuration,DC=example1,DC=com' FSMO Role Owner 'CN=Adatum,CN=Servers,CN=Example2,CN=Sites,CN=Configuration,DC=example1,DC=com' DNS Hostname of FSMO 'Adatum.example1.com' Redirecting schema changes to 'CN=Adatum,CN=Servers,CN=Example2,CN=Sites,CN=Configuration,DC=example1,DC=com' Default Naming Context 'DC=example1,DC=com' Domain name = 'example1' Done with getting information from Active Directory Checking SFU schema version Checking SFU V30 schema on server - Adatum Verifying all extended schema attributes. AD Server = 'Adatum'. Verifying all extended schema classes. AD Server = 'Adatum'. Verifying all extended schema classes. AD Server = 'Adatum'. Verifying all extended auxilliary schema classes. AD Server = 'Adatum'. Checking existing SFU configuration version Checking SFU V30 schema on server - Adatum Verifying all extended schema attributes. AD Server = 'Adatum'. Verifying all extended schema classes. AD Server = 'Adatum'. Verifying all extended schema classes. AD Server = 'Adatum'. Verifying all extended auxilliary schema classes. AD Server = 'Adatum'. Marking DC as NIS server SFU Schema Extension did not complete. End of schema extension. Time: Mon Aug 28 07:38:39 2006This behavior will occur if there are Active Directory objects that use the same CN ( Common Name) as the domain controller object under OU=Domain Controllers.
To resolve this problem:
1. Install thew Windows Server 2003 Support Tools by double-clicking the Suptools.msi file in the Support\Tools folder on the Windows Server 2003 CD-ROM.
2. Start / Run / adsiedit.msc / OK.
3. Expand Domain \[Adatum\].
4. Expand DC=example DC=com.
5. Locate and rename all objects that use the same CN as the domain controller object, but DO NOT rename the domain controller object.