Alex Green
2008-Dec-11 17:14 UTC
[Samba] Failed to join domain: failed to set machine spn: Constraint violation
Hi,
I'm seeing this error on 3.0.24, 3.0.28, 3.0.32 and 3.2.6:
Failed to join domain: failed to set machine spn: Constraint violation
[Sanitised]
First Run:
net ads join createupn=HOST/FQDN@DOM.REALM.DOMAIN.COM
createcomputer="OU/OU/OU/Services" -U username -d1
Enter username's password:
[2008/12/11 17:02:32, 1] libnet/libnet_join.c:libnet_Join(1770)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
in: struct libnet_JoinCtx
dc_name : NULL
machine_name : 'HOSTNAME'
domain_name : *
domain_name : 'DOM.REALM.DOMAIN.COM'
account_ou : 'OU/OU/OU/Services'
admin_account : 'username'
admin_password : *
machine_password : NULL
join_flags : 0x00000023 (35)
0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
0: WKSSVC_JOIN_FLAGS_DEFER_SPN
0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
os_version : NULL
os_name : NULL
create_upn : 0x01 (1)
upn :
'HOST/FQDN@DOM.REALM.DOMAIN.COM'
modify_config : 0x00 (0)
ads : NULL
debug : 0x01 (1)
secure_channel_type : SEC_CHAN_WKSTA (2)
[2008/12/11 17:02:33, 1]
libnet/libnet_join.c:libnet_join_precreate_machine_acct(235)
machine account creation created
[2008/12/11 17:02:33, 1] libnet/libnet_join.c:libnet_Join(1801)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
out: struct libnet_JoinCtx
account_name : NULL
netbios_domain_name : 'DOM'
dns_domain_name : 'DOM.REALM.DOMAIN.COM'
dn :
'CN=HOSTNAME,OU=Services,OU=OU,OU=OU,OU=OU,DC=DOM,DC=REALM,DC=DOMAIN,DC=com'
domain_sid : *
domain_sid :
S-1-5-21-1606980848-1965331169-1417001333
modified_config : 0x00 (0)
error_string : 'failed to set machine spn:
Constraint violation'
domain_is_ad : 0x01 (1)
result : WERR_GENERAL_FAILURE
Failed to join domain: failed to set machine spn: Constraint violation
SPN Created - but errors!!!
Second Run:
net ads join createupn=HOST/FQDN@DOM.REALM.DOMAIN.COM
createcomputer="OU/OU/OU/Services" -U username -d1
Enter username's password:
[2008/12/11 16:54:40, 1] libnet/libnet_join.c:libnet_Join(1770)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
in: struct libnet_JoinCtx
dc_name : NULL
machine_name : 'HOSTNAME'
domain_name : *
domain_name : 'DOM.REALM.DOMAIN.COM'
account_ou : 'OU/OU/OU/Services'
admin_account : 'username'
admin_password : *
machine_password : NULL
join_flags : 0x00000023 (35)
0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
0: WKSSVC_JOIN_FLAGS_DEFER_SPN
0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
os_version : NULL
os_name : NULL
create_upn : 0x01 (1)
upn :
'HOST/FQDN@DOM.REALM.DOMAIN.COM'
modify_config : 0x00 (0)
ads : NULL
debug : 0x01 (1)
secure_channel_type : SEC_CHAN_WKSTA (2)
[2008/12/11 16:54:41, 1]
libnet/libnet_join.c:libnet_join_precreate_machine_acct(258)
The machine account already exists in the specified OU.
[2008/12/11 16:54:41, 1] libnet/libnet_join.c:libnet_Join(1801)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
out: struct libnet_JoinCtx
account_name : NULL
netbios_domain_name : 'DOM'
dns_domain_name : 'DOM.REALM.DOMAIN.COM'
dn :
'CN=HOSTNAME,OU=Services,OU=OU,OU=OU,OU=OU,DC=DOM,DC=REALM,DC=DOMAIN,DC=com'
domain_sid : *
domain_sid :
S-1-5-21-1606980848-1965331169-1417001333
modified_config : 0x00 (0)
error_string : 'failed to set machine spn:
Constraint violation'
domain_is_ad : 0x01 (1)
result : WERR_GENERAL_FAILURE
Failed to join domain: failed to set machine spn: Constraint violation
Is this a bug?
Thanks,
Alex
Alex Green
2008-Dec-12 10:17 UTC
[Samba] Failed to join domain: failed to set machine spn: Constraint violation
Anyone?.... any ideas?
-----Original Message-----
From: samba-bounces+alex.green=db.com@lists.samba.org
[mailto:samba-bounces+alex.green=db.com@lists.samba.org] On Behalf Of Alex Green
Sent: 11 December 2008 17:09
To: samba@lists.samba.org
Subject: [Samba] Failed to join domain: failed to set machine spn: Constraint
violation
Hi,
I'm seeing this error on 3.0.24, 3.0.28, 3.0.32 and 3.2.6:
Failed to join domain: failed to set machine spn: Constraint violation
[Sanitised]
First Run:
net ads join createupn=HOST/FQDN@DOM.REALM.DOMAIN.COM
createcomputer="OU/OU/OU/Services" -U username -d1
Enter username's password:
[2008/12/11 17:02:32, 1] libnet/libnet_join.c:libnet_Join(1770)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
in: struct libnet_JoinCtx
dc_name : NULL
machine_name : 'HOSTNAME'
domain_name : *
domain_name : 'DOM.REALM.DOMAIN.COM'
account_ou : 'OU/OU/OU/Services'
admin_account : 'username'
admin_password : *
machine_password : NULL
join_flags : 0x00000023 (35)
0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
0: WKSSVC_JOIN_FLAGS_DEFER_SPN
0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
os_version : NULL
os_name : NULL
create_upn : 0x01 (1)
upn :
'HOST/FQDN@DOM.REALM.DOMAIN.COM'
modify_config : 0x00 (0)
ads : NULL
debug : 0x01 (1)
secure_channel_type : SEC_CHAN_WKSTA (2)
[2008/12/11 17:02:33, 1]
libnet/libnet_join.c:libnet_join_precreate_machine_acct(235)
machine account creation created
[2008/12/11 17:02:33, 1] libnet/libnet_join.c:libnet_Join(1801)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
out: struct libnet_JoinCtx
account_name : NULL
netbios_domain_name : 'DOM'
dns_domain_name : 'DOM.REALM.DOMAIN.COM'
dn :
'CN=HOSTNAME,OU=Services,OU=OU,OU=OU,OU=OU,DC=DOM,DC=REALM,DC=DOMAIN,DC=com'
domain_sid : *
domain_sid :
S-1-5-21-1606980848-1965331169-1417001333
modified_config : 0x00 (0)
error_string : 'failed to set machine spn:
Constraint violation'
domain_is_ad : 0x01 (1)
result : WERR_GENERAL_FAILURE
Failed to join domain: failed to set machine spn: Constraint violation
SPN Created - but errors!!!
Second Run:
net ads join createupn=HOST/FQDN@DOM.REALM.DOMAIN.COM
createcomputer="OU/OU/OU/Services" -U username -d1
Enter username's password:
[2008/12/11 16:54:40, 1] libnet/libnet_join.c:libnet_Join(1770)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
in: struct libnet_JoinCtx
dc_name : NULL
machine_name : 'HOSTNAME'
domain_name : *
domain_name : 'DOM.REALM.DOMAIN.COM'
account_ou : 'OU/OU/OU/Services'
admin_account : 'username'
admin_password : *
machine_password : NULL
join_flags : 0x00000023 (35)
0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
0: WKSSVC_JOIN_FLAGS_DEFER_SPN
0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
os_version : NULL
os_name : NULL
create_upn : 0x01 (1)
upn :
'HOST/FQDN@DOM.REALM.DOMAIN.COM'
modify_config : 0x00 (0)
ads : NULL
debug : 0x01 (1)
secure_channel_type : SEC_CHAN_WKSTA (2)
[2008/12/11 16:54:41, 1]
libnet/libnet_join.c:libnet_join_precreate_machine_acct(258)
The machine account already exists in the specified OU.
[2008/12/11 16:54:41, 1] libnet/libnet_join.c:libnet_Join(1801)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
out: struct libnet_JoinCtx
account_name : NULL
netbios_domain_name : 'DOM'
dns_domain_name : 'DOM.REALM.DOMAIN.COM'
dn :
'CN=HOSTNAME,OU=Services,OU=OU,OU=OU,OU=OU,DC=DOM,DC=REALM,DC=DOMAIN,DC=com'
domain_sid : *
domain_sid :
S-1-5-21-1606980848-1965331169-1417001333
modified_config : 0x00 (0)
error_string : 'failed to set machine spn:
Constraint violation'
domain_is_ad : 0x01 (1)
result : WERR_GENERAL_FAILURE
Failed to join domain: failed to set machine spn: Constraint violation
Is this a bug?
Thanks,
Alex
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
Guenther Deschner
2008-Dec-12 10:24 UTC
[Samba] Failed to join domain: failed to set machine spn: Constraint violation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alex Green wrote:> Anyone?.... any ideas?Can you open a bug on this and upload a network trace as well ? Thanks, Guenther - -- G?nther Deschner GPG-ID: 8EE11688 Red Hat gdeschner@redhat.com Samba Team gd@samba.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAklCO+cACgkQSOk3aI7hFoiTLgCeJkjEOkx13ob9j7glt663YmJp Pr0An2flu3aPZvFeFlfjdDtYQpaFrPHm =Iz61 -----END PGP SIGNATURE-----
Alex Green
2008-Dec-12 11:38 UTC
[Samba] Failed to join domain: failed to set machine spn: Constraint violation
Sure, however the trace will take a bit to santitise. -----Original Message----- From: Guenther Deschner [mailto:gd@samba.org] Sent: 12 December 2008 10:25 To: Alex Green Cc: samba@lists.samba.org Subject: Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alex Green wrote:> Anyone?.... any ideas?Can you open a bug on this and upload a network trace as well ? Thanks, Guenther - -- G?nther Deschner GPG-ID: 8EE11688 Red Hat gdeschner@redhat.com Samba Team gd@samba.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAklCO+cACgkQSOk3aI7hFoiTLgCeJkjEOkx13ob9j7glt663YmJp Pr0An2flu3aPZvFeFlfjdDtYQpaFrPHm =Iz61 -----END PGP SIGNATURE-----
Apparently Analagous Threads
- Unable to create principle and join domain with solaris / samba 3.5.8
- problem with samba 3.5.6 try to join W2K8
- Compiling SAMBA on Solaris 10 to use AD on Windows 2008 server
- Join multiple CTDB managed Samba servers into Active Directory
- 3.3.4 2008 Domain Join Error