Bob of Donelson Trophy
2015-Feb-06 18:45 UTC
[Samba] ERROR_DNS_UPDATE_FAILED and NT_STATUS_UNSUCCESSFUL
I have been struggling with getting a member server to join my domain. Thanks to testing and using a VM, I can get the test member server to join my domain. The member server on "real hardware" cannot join, well sort of. When I "join", I get: net ads join -U Administrator Enter Administrator's password: Using short domain name -- DTS***M Joined 'DTMBR01' to dns domain 'dts***m.lan' DNS Update for dtmember01.dts***m.lan failed: ERROR_DNS_UPDATE_FAILED DNS update failed: NT_STATUS_UNSUCCESSFUL And when I "leave", I get: net ads leave -U Administrator Enter Administrator's password: Deleted account for 'DTMBR01' in realm 'DTS***M.LAN' So, I look for what where? -- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" Links: ------ [1] http://www.donelsontrophy.com
Rowland Penny
2015-Feb-08 08:56 UTC
[Samba] ERROR_DNS_UPDATE_FAILED and NT_STATUS_UNSUCCESSFUL
On 06/02/15 18:45, Bob of Donelson Trophy wrote:> > > I have been struggling with getting a member server to join my domain. > Thanks to testing and using a VM, I can get the test member server to > join my domain. The member server on "real hardware" cannot join, well > sort of. > > When I "join", I get: > > net ads join -U Administrator > Enter Administrator's password: > Using short domain name -- DTS***M > Joined 'DTMBR01' to dns domain 'dts***m.lan' > DNS Update for dtmember01.dts***m.lan failed: ERROR_DNS_UPDATE_FAILED > DNS update failed: NT_STATUS_UNSUCCESSFUL > > And when I "leave", I get: > > net ads leave -U Administrator > Enter Administrator's password: > Deleted account for 'DTMBR01' in realm 'DTS***M.LAN' > > So, I look for what where?Hi Bob, your machine is actually joining the domain, it is the dns adding bit that is failing, try joining again and see if you can connect from another client, if it doesn't, run 'samba-tool dns add --help' and from this work out how to add the computers dns records. Rowland
On 06/02/15 19:45, Bob of Donelson Trophy wrote:> > > I have been struggling with getting a member server to join my domain. > Thanks to testing and using a VM, I can get the test member server to > join my domain. The member server on "real hardware" cannot join, well > sort of. > > When I "join", I get: > > net ads join -U Administrator > Enter Administrator's password: > Using short domain name -- DTS***M > Joined 'DTMBR01' to dns domain 'dts***m.lan' > DNS Update for dtmember01.dts***m.lan failed: ERROR_DNS_UPDATE_FAILED > DNS update failed: NT_STATUS_UNSUCCESSFUL > > And when I "leave", I get: > > net ads leave -U Administrator > Enter Administrator's password: > Deleted account for 'DTMBR01' in realm 'DTS***M.LAN' > > So, I look for what where?The DC handling the join does not know the fqdn of the member server. Add: 127.0.0.1 dtmember01.dts***m.lan dtmember01 localhost to /etc/hosts then rejoin
Rowland Penny
2015-Feb-08 09:36 UTC
[Samba] ERROR_DNS_UPDATE_FAILED and NT_STATUS_UNSUCCESSFUL
On 08/02/15 09:21, buhorojo wrote:> On 06/02/15 19:45, Bob of Donelson Trophy wrote: >> >> I have been struggling with getting a member server to join my domain. >> Thanks to testing and using a VM, I can get the test member server to >> join my domain. The member server on "real hardware" cannot join, well >> sort of. >> >> When I "join", I get: >> >> net ads join -U Administrator >> Enter Administrator's password: >> Using short domain name -- DTS***M >> Joined 'DTMBR01' to dns domain 'dts***m.lan' >> DNS Update for dtmember01.dts***m.lan failed: ERROR_DNS_UPDATE_FAILED >> DNS update failed: NT_STATUS_UNSUCCESSFUL >> >> And when I "leave", I get: >> >> net ads leave -U Administrator >> Enter Administrator's password: >> Deleted account for 'DTMBR01' in realm 'DTS***M.LAN' >> >> So, I look for what where? > The DC handling the join does not know the fqdn of the member server. > Add: > 127.0.0.1 dtmember01.dts***m.lan dtmember01 localhost > to /etc/hosts > then rejoinDON'T do this, You can check that /etc/hosts has this: 127.0.0.1 localhost <computer ip> dtmember01.dts***m.lan dtmember01 If you do it the way advised, your computer *will* only reply to '127.0.0.1' Rowland
Bob of Donelson Trophy
2015-Feb-08 14:15 UTC
[Samba] ERROR_DNS_UPDATE_FAILED and NT_STATUS_UNSUCCESSFUL
Never seen this mentioned before and it did not work. Sorry. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-02-08 03:21, buhorojo wrote:> On 06/02/15 19:45, Bob of Donelson Trophy wrote: > >> I have been struggling with getting a member server to join my domain. Thanks to testing and using a VM, I can get the test member server to join my domain. The member server on "real hardware" cannot join, well sort of. When I "join", I get: net ads join -U Administrator Enter Administrator's password: Using short domain name -- DTS***M Joined 'DTMBR01' to dns domain 'dts***m.lan' DNS Update for dtmember01.dts***m.lan failed: ERROR_DNS_UPDATE_FAILED DNS update failed: NT_STATUS_UNSUCCESSFUL And when I "leave", I get: net ads leave -U Administrator Enter Administrator's password: Deleted account for 'DTMBR01' in realm 'DTS***M.LAN' So, I look for what where? > > The DC handling the join does not know the fqdn of the member server. Add: > 127.0.0.1 dtmember01.dts***m.lan dtmember01 localhost > to /etc/hosts > then rejoinLinks: ------ [1] http://www.donelsontrophy.com
Bob of Donelson Trophy
2015-Feb-08 14:20 UTC
[Samba] ERROR_DNS_UPDATE_FAILED and NT_STATUS_UNSUCCESSFUL
Once again, Bob is in 'the land of unknown bind knowledge.' What type of data am I adding? Shouldn't dns_update be run when adding the member server? Is this a "simple-bind-dn"? hum-m-m-m! --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-02-08 02:56, Rowland Penny wrote:> On 06/02/15 18:45, Bob of Donelson Trophy wrote: > >> I have been struggling with getting a member server to join my domain. Thanks to testing and using a VM, I can get the test member server to join my domain. The member server on "real hardware" cannot join, well sort of. When I "join", I get: net ads join -U Administrator Enter Administrator's password: Using short domain name -- DTS***M Joined 'DTMBR01' to dns domain 'dts***m.lan' DNS Update for dtmember01.dts***m.lan failed: ERROR_DNS_UPDATE_FAILED DNS update failed: NT_STATUS_UNSUCCESSFUL And when I "leave", I get: net ads leave -U Administrator Enter Administrator's password: Deleted account for 'DTMBR01' in realm 'DTS***M.LAN' So, I look for what where? > > Hi Bob, your machine is actually joining the domain, it is the dns adding bit that is failing, try joining again and see if you can connect from another client, if it doesn't, run 'samba-tool dns add --help' and from this work out how to add the computers dns records. > > RowlandLinks: ------ [1] http://www.donelsontrophy.com