From de4788be9b6ce457e132bf124c01ab674279703a Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek@redhat.com>
Date: Sep 01 2014 11:46:26 +0000
Subject: LDAP: Add Windows Server 2012 R2 functional level


https://fedorahosted.org/sssd/ticket/2418

According to http://msdn.microsoft.com/en-us/library/cc223272.aspx a
Windows Server 2012 R2 has a functional level set to '6'. We need to
support that value in order for tokenGroups to be functional.

For more information on the functional levels, please refer to:
    http://technet.microsoft.com/en-us/library/understanding-active-directory-functional-levels%28v=ws.10%29.aspx

Reviewed-by: Pavel Březina <pbrezina@redhat.com>
(cherry picked from commit 9ea0969f6a9e52b7c57feb5808266b0739ee40a4)

---

diff --git a/src/providers/ldap/sdap.c b/src/providers/ldap/sdap.c
index e8d23c9..4eef405 100644
--- a/src/providers/ldap/sdap.c
+++ b/src/providers/ldap/sdap.c
@@ -1199,6 +1199,7 @@ int sdap_get_server_opts_from_rootdse(TALLOC_CTX *memctx,
             case DS_BEHAVIOR_WIN2008:
             case DS_BEHAVIOR_WIN2008R2:
             case DS_BEHAVIOR_WIN2012:
+            case DS_BEHAVIOR_WIN2012R2:
                 opts->dc_functional_level = dc_level;
                 DEBUG(SSSDBG_CONF_SETTINGS,
                       "Setting AD compatibility level to [%d]\n",
diff --git a/src/providers/ldap/sdap.h b/src/providers/ldap/sdap.h
index e92d513..145ff6d 100644
--- a/src/providers/ldap/sdap.h
+++ b/src/providers/ldap/sdap.h
@@ -376,7 +376,8 @@ enum dc_functional_level {
     DS_BEHAVIOR_WIN2003 = 2,
     DS_BEHAVIOR_WIN2008 = 3,
     DS_BEHAVIOR_WIN2008R2 = 4,
-    DS_BEHAVIOR_WIN2012 = 5
+    DS_BEHAVIOR_WIN2012 = 5,
+    DS_BEHAVIOR_WIN2012R2 = 6
 };
 
 struct sdap_domain {