samba - Sep 2019 - Join DC has failed with error: NT_STATUS_PASSWORD_RESTRICTION

On 23/09/2019 09:02, tomek82 wrote:
>
> W dniu 2019-09-22 20:24:36 u?ytkownik Rowland penny via samba <samba at
lists.samba.org> napisa?:
>> On 22/09/2019 19:05, tomek82 via samba wrote:
>> &gt;   Hi,
>> &gt;
>> &gt; I've joined samba DC to existing windows domain using:
>> You say 'existing windows domain', but what is the Windows
domain ?
>> &gt;
>> &gt; samba-tool domain join ***.** DC -U"***\admin"
--dns-backend=BIND9_DLZ
>> &gt;
>> &gt; It has stopped on
>> &gt;
>> &gt; Adding DNS account CN=dns-DC...
>> &gt;
>> &gt; with the below error.
>> &gt;
>> &gt; ERROR(runtime): uncaught exception - (-1073741716,
'SetUserInfo2 level 26 for [dns-DC] failed:
NT_STATUS_PASSWORD_RESTRICTION')
>>
>> This would seem to mean the password isn't complex enough, but the
>> password should be random, so is the Windows domain set to have
>> extremely complex passwords ?
>>
>> What version of Samba are you running ?
>>
>> And on what OS ?
>>
>> Rowland
>>
>>
>>
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  <a target="_blank"
href="https://lists.samba.org/mailman/options/samba">https://lists.samba.org/mailman/options/samba</a>
>
> It is Ubuntu 18.04.3 LTS
> smbd -V: 4.7.6-Ubuntu
>
> domain on Windows server 2016
>
> is it possible to manually configure this password?
>
> Thanks,
> Tom
No and it is all a bit academic, you cannot join Samba as a DC to a 
Windows 2016 (yet). You 'might' be able to join if you run the Windows 
DC in 2012 function level, but even if do get the join to work, I 
wouldn't use it in production, there is still so much work to do on Samba.

Rowland