but I do not need a domain member (((
and another controller DC
Flag compile
%configure \
--enable-fhs \
--with-piddir=/run \
--with-sockets-dir=/run/samba \
--with-modulesdir=%{_libdir}/samba \
--with-pammodulesdir=%{_libdir}/security \
--with-lockdir=/var/lib/samba/lock \
--with-statedir=/var/lib/samba \
--with-cachedir=/var/lib/samba \
--disable-rpath-install \
--with-shared-modules=%{_samba_modules} \
--bundled-libraries=%{_samba_libraries} \
--with-pam \
--with-pie \
--with-relro \
--without-fam \
--private-libraries=%{_samba_private_libraries} \
--with-system-mitkrb5 \
--with-cluster-support \
--with-profiling-data \
--enable-selftest \
--accel-aes=intelaesni \
--with-systemd \
on the test environment, the controller joined the DC domain.
But it does not join in the working environment
В Пн, 19/02/2018 в 08:46 +0000, Rowland Penny via samba
пишет:> On Mon, 19 Feb 2018 12:04:57 +0500
> "denis.shigapov via samba" <samba at lists.samba.org>
wrote:
>
> > Hi, I'm join samba to windows AD
> > OS Centos7samba version 4.7.5
> > ========== command JOIN DC=========> > samba-tool domain join
example.ru --server=srv-dc01.example.ru --
> > username=vas.lah --password=password --realm=EXAMPLE.RU --
> > site=SITE2
> > -d 7
> >
>
> I would have expected to see:
>
> samba-tool domain join example.ru DC --server=srv-dc01.example.ru
> --username=vas.lah --password=password --realm=EXAMPLE.RU --
> site=SITE2
> -d7
>
> Without the 'DC' you will end up with a 'MEMBER' and they
do not
> work ;-)
>
>
> > do_join ctx.join_add_dns_records()
> > File "/usr/lib64/python2.7/site- packages/samba/join.py",
line
> > 1116,
> > in join_add_dns_records
> > dns_partition=domaindns_zone_dn)
> > File "/usr/lib64/python2.7/site-packages/samba/samdb.py",
line 939,
> > in dns_lookup
> > dns_partition=dns_partition)
>
> Is the DC, that you are trying to join to, running a DNS server ?
>
> Rowland
>
>
On Mon, 19 Feb 2018 14:30:45 +0500 "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote:> but I do not need a domain member ((( > and another controller DCI never said you did ;-) The usage for 'samba-tool domain join is: samba-tool domain join <dnsdomain> [DC|RODC|MEMBER|SUBDOMAIN] [options] You are missing this ---------------^^ If you do not specify the role to join as, you will get a 'MEMBER' You also haven't said if the original DC 'srv-dc01.example.ru' is running a DNS server, it might also help if you tell us what windows version is running on the original DC Rowland
samba-tool domain join example.ru DC --server=srv-dc01.example.ru --
username=vas.lah --password=password --realm=EXAMPLE.RU --site=SITE2
srv-dc01.example.ru - windows server 2008netdom query fsmoSchema
owner srv-dc01.example.ruDomain role owner
srv-dc01.example.ruPDC role srv-
dc02.example.ruRID pool manager srv-
dc01.example.ruInfrastructure owner srv-dc01.example.ru
Setting update DNS in srv-dc01.example.ru: Security only
В Пн, 19/02/2018 в 10:02 +0000, Rowland Penny via samba
пишет:> On Mon, 19 Feb 2018 14:30:45 +0500
> "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote:
>
> > but I do not need a domain member (((
> > and another controller DC
>
> I never said you did ;-)
>
> The usage for 'samba-tool domain join is:
>
> samba-tool domain join <dnsdomain> [DC|RODC|MEMBER|SUBDOMAIN]
> [options]
>
> You are missing this ---------------^^
>
> If you do not specify the role to join as, you will get a 'MEMBER'
>
> You also haven't said if the original DC 'srv-dc01.example.ru'
is
> running a DNS server, it might also help if you tell us what windows
> version is running on the original DC
>
> Rowland
>
samba-tool domain join example.ru DC --server=srv-dc01.example.ru -- username=vas.lah --password=password --realm=EXAMPLE.RU --site=SITE2 srv-dc01.example.ru - windows server 2008 netdom query fsmo Schema owner srv-dc01.example.ru Domain role owner srv-dc01.example.ru PDC role srv-dc02.example.ru RID pool manager srv-dc01.example.ru Infrastructure owner srv-dc01.example.ru Setting update DNS in srv-dc01.example.ru: Security only В Пн, 19/02/2018 в 10:02 +0000, Rowland Penny via samba пишет:> On Mon, 19 Feb 2018 14:30:45 +0500 > "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: > > > but I do not need a domain member ((( > > and another controller DC > > I never said you did ;-) > > The usage for 'samba-tool domain join is: > > samba-tool domain join <dnsdomain> [DC|RODC|MEMBER|SUBDOMAIN] > [options] > > You are missing this ---------------^^ > > If you do not specify the role to join as, you will get a 'MEMBER' > > You also haven't said if the original DC 'srv-dc01.example.ru' is > running a DNS server, it might also help if you tell us what windows > version is running on the original DC > > Rowland >