samba - Mar 2015 - "failed to lookup DC info for domain over rpc" when joining samba4 domain

Hi,

I have an existing samba4 domain with 2 domain controllers on different
sites.

Both domain controllers are running samba 4.1.17

Until recently the domain operated exactly as expected. I recently tried
to join a new machine to the domain and received the error:

Failed to join domain: failed to lookup DC info for domain
'ADS.CONNON.ME.UK' over rpc

I'm not sure what has triggered this change in behaviour. Authentication
against the domain still works as normal.

I've attached a full debug log of the domain join process.

Anyone got any ideas where I should be looking?

Regards,
Richard

Hi again,

Seems you can't attach items to mails on this list so here's the debug
log:
http://www.irconan.co.uk/net-ads-join.log

Regards,
Richard

On 09/03/2015 21:33, Richard Connon wrote:
> Hi,
>
> I have an existing samba4 domain with 2 domain controllers on different
> sites.
>
> Both domain controllers are running samba 4.1.17
>
> Until recently the domain operated exactly as expected. I recently tried
> to join a new machine to the domain and received the error:
>
> Failed to join domain: failed to lookup DC info for domain
> 'ADS.CONNON.ME.UK' over rpc
>
> I'm not sure what has triggered this change in behaviour.
Authentication
> against the domain still works as normal.
>
> I've attached a full debug log of the domain join process.
>
> Anyone got any ideas where I should be looking?
>
> Regards,
> Richard
>
>

Hey Richard,

you should post your debug log because your attachment has been scrubbed.

Have you checked your DNS entries? I don't know why but I had an issue some
days ago that the host a entry for my fsmo DC had disappeared.

Regards
Tim

Am 9. M?rz 2015 22:33:43 MEZ, schrieb Richard Connon <richard at
connon.me.uk>:
>Hi,
>
>I have an existing samba4 domain with 2 domain controllers on different
>sites.
>
>Both domain controllers are running samba 4.1.17
>
>Until recently the domain operated exactly as expected. I recently
>tried
>to join a new machine to the domain and received the error:
>
>Failed to join domain: failed to lookup DC info for domain
>'ADS.CONNON.ME.UK' over rpc
>
>I'm not sure what has triggered this change in behaviour.
>Authentication
>against the domain still works as normal.
>
>I've attached a full debug log of the domain join process.
>
>Anyone got any ideas where I should be looking?
>
>Regards,
>Richard
>
>
>------------------------------------------------------------------------
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba

On 09/03/15 21:33, Richard Connon wrote:
> Hi,
>
> I have an existing samba4 domain with 2 domain controllers on different
> sites.
>
> Both domain controllers are running samba 4.1.17
>
> Until recently the domain operated exactly as expected. I recently tried
> to join a new machine to the domain and received the error:
>
> Failed to join domain: failed to lookup DC info for domain
> 'ADS.CONNON.ME.UK' over rpc
>
> I'm not sure what has triggered this change in behaviour.
Authentication
> against the domain still works as normal.
>
> I've attached a full debug log of the domain join process.
>
> Anyone got any ideas where I should be looking?
>
> Regards,
> Richard
>
>
How did you try to join the machine to the domain ? I think I know, but 
it would like you to confirm my suspicions.

Rowland

On 09/03/2015 21:59, Rowland Penny wrote:
> How did you try to join the machine to the domain ? I think I know, 
> but it would like you to confirm my suspicions.
Hi Rowland,

This output was generated with `net ads join -Uprovisioning%<password>
-d10

Regards,
Richard

Hi Tim,

I re-posted with a link to the debug log.

I appear to have A and AAAA records present for both DCs. Not sure about 
the relevant SRV records used in domain join. Got any pointers on how 
they should look?

Regards,
Richard

On 09/03/2015 21:57, Tim wrote:
> Hey Richard,
>
> you should post your debug log because your attachment has been scrubbed.
>
> Have you checked your DNS entries? I don't know why but I had an issue
some days ago that the host a entry for my fsmo DC had disappeared.
>
> Regards
> Tim
>
> Am 9. M?rz 2015 22:33:43 MEZ, schrieb Richard Connon <richard at
connon.me.uk>:
>> Hi,
>>
>> I have an existing samba4 domain with 2 domain controllers on different
>> sites.
>>
>> Both domain controllers are running samba 4.1.17
>>
>> Until recently the domain operated exactly as expected. I recently
>> tried
>> to join a new machine to the domain and received the error:
>>
>> Failed to join domain: failed to lookup DC info for domain
>> 'ADS.CONNON.ME.UK' over rpc
>>
>> I'm not sure what has triggered this change in behaviour.
>> Authentication
>> against the domain still works as normal.
>>
>> I've attached a full debug log of the domain join process.
>>
>> Anyone got any ideas where I should be looking?
>>
>> Regards,
>> Richard
>>
>>
>>
------------------------------------------------------------------------
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba