mark.cuthbert@yorkshirewater.co.uk
2006-Mar-23 09:57 UTC
[Samba] Samba 3.0.21b binaries on AIX 5.2 ML7 fails to join ADS domain
After installing Samba3.0.21b, on AIX 5.2 ML7 I get the following error trying to join a domain, can anyone offer any advice? Thanks Mark [wmsprod2:root]/usr/local/samba> testparm Load smb config files from /opt/Samba/3.0.21b/lib/smb.conf Loaded services file OK. WARNING: passdb expand explicit = yes is deprecated Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions [global] workgroup = CORP realm = CORPAD1.CORP.YW.KELDA security = ADS log level = 3 log file = /usr/local/samba/lib/log.%m ldap ssl = no [wmsprod2:root]/usr/local/samba> net ads info LDAP server: 10.44.9.65 LDAP server name: corpad3 Realm: CORP.YW.KELDA Bind Path: dc=CORP,dc=YW,dc=KELDA LDAP port: 389 Server time: Wed, 22 Mar 2006 15:09:47 GMT KDC server: 10.44.9.65 Server time offset: 127 [wmsprod2:root]/usr/local/samba> net ads join -U Administrator%XXXXXXXX -d 3 [2006/03/22 15:11:02, 3] param/loadparm.c:lp_load(4202) lp_load: refreshing parameters [2006/03/22 15:11:02, 3] param/loadparm.c:init_globals(1385) Initialising global parameters [2006/03/22 15:11:02, 3] param/params.c:pm_process(574) params.c:pm_process() - Processing configuration file "/opt/Samba/3.0.21 b/lib/smb.conf" [2006/03/22 15:11:02, 3] param/loadparm.c:do_section(3657) Processing section "[global]" [2006/03/22 15:11:02, 2] lib/interface.c:add_interface(81) added interface ip=10.44.8.222 bcast=10.44.15.255 nmask=255.255.248.0 [2006/03/22 15:11:02, 3] libads/ldap.c:ads_connect(288) Connected to LDAP server 10.44.9.65 [2006/03/22 15:11:02, 3] libads/ldap.c:ads_server_info(2542) got ldap server name corpad3@CORP.YW.KELDA, using bind path: dc=CORP,dc=YW,dc=KELDA [2006/03/22 15:11:02, 3] libads/sasl.c:ads_sasl_spnego_bind(210) ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2 [2006/03/22 15:11:02, 3] libads/sasl.c:ads_sasl_spnego_bind(210) ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 [2006/03/22 15:11:02, 3] libads/sasl.c:ads_sasl_spnego_bind(210) ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3 [2006/03/22 15:11:02, 3] libads/sasl.c:ads_sasl_spnego_bind(210) ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 [2006/03/22 15:11:02, 3] libads/sasl.c:ads_sasl_spnego_bind(219) ads_sasl_spnego_bind: got server principal name =corpad3$@CORP.YW.KELDA [2006/03/22 15:11:02, 3] libsmb/clikrb5.c:ads_krb5_mk_req(479) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) [2006/03/22 15:11:02, 0] libads/kerberos.c:ads_kinit_password(164) kerberos_kinit_password Administrator@CORP.YW.KELDA failed: Cannot resolve network address for KDC in requested realm [2006/03/22 15:11:02, 0] utils/net_ads.c:ads_startup(191) ads_connect: Cannot resolve network address for KDC in requested realm [2006/03/22 15:11:02, 2] utils/net.c:main(878) return code = -1 Find out how to protect your home from frost this winter at www.yorkshirewater.com YORKSHIRE WATER - WINNER OF THE UTILITY OF THE YEAR AWARD 2004 AND 2005 The information in this e-mail is confidential and may also be legally privileged. The contents are intended for recipient only and are subject to the legal notice available at http://www.keldagroup.com/email.htm Yorkshire Water Services Limited Registered Office Western House Halifax Road Bradford BD6 2SZ Registered in England and Wales No 2366682
andrew.x.smith@jpmchase.com
2006-Mar-23 11:32 UTC
[Samba] Samba 3.0.21b binaries on AIX 5.2 ML7 fails to join ADS domain
Seems your server doesnt have Kerberos configured correctly, u need to ensure you can successfully run "kinit Administrator" before a join to AD will work. Have a look in the how to, cheers Andy. mark.cuthbert@yorkshirewater.co.uk Sent by: samba-bounces+andrew.x.smith=jpmchase.com@lists.samba.org 23/03/2006 09:56 To: samba@lists.samba.org cc: Subject: [Samba] Samba 3.0.21b binaries on AIX 5.2 ML7 fails to join ADS domain After installing Samba3.0.21b, on AIX 5.2 ML7 I get the following error trying to join a domain, can anyone offer any advice? Thanks Mark [wmsprod2:root]/usr/local/samba> testparm Load smb config files from /opt/Samba/3.0.21b/lib/smb.conf Loaded services file OK. WARNING: passdb expand explicit = yes is deprecated Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions [global] workgroup = CORP realm = CORPAD1.CORP.YW.KELDA security = ADS log level = 3 log file = /usr/local/samba/lib/log.%m ldap ssl = no [wmsprod2:root]/usr/local/samba> net ads info LDAP server: 10.44.9.65 LDAP server name: corpad3 Realm: CORP.YW.KELDA Bind Path: dc=CORP,dc=YW,dc=KELDA LDAP port: 389 Server time: Wed, 22 Mar 2006 15:09:47 GMT KDC server: 10.44.9.65 Server time offset: 127 [wmsprod2:root]/usr/local/samba> net ads join -U Administrator%XXXXXXXX -d 3 [2006/03/22 15:11:02, 3] param/loadparm.c:lp_load(4202) lp_load: refreshing parameters [2006/03/22 15:11:02, 3] param/loadparm.c:init_globals(1385) Initialising global parameters [2006/03/22 15:11:02, 3] param/params.c:pm_process(574) params.c:pm_process() - Processing configuration file "/opt/Samba/3.0.21 b/lib/smb.conf" [2006/03/22 15:11:02, 3] param/loadparm.c:do_section(3657) Processing section "[global]" [2006/03/22 15:11:02, 2] lib/interface.c:add_interface(81) added interface ip=10.44.8.222 bcast=10.44.15.255 nmask=255.255.248.0 [2006/03/22 15:11:02, 3] libads/ldap.c:ads_connect(288) Connected to LDAP server 10.44.9.65 [2006/03/22 15:11:02, 3] libads/ldap.c:ads_server_info(2542) got ldap server name corpad3@CORP.YW.KELDA, using bind path: dc=CORP,dc=YW,dc=KELDA [2006/03/22 15:11:02, 3] libads/sasl.c:ads_sasl_spnego_bind(210) ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2 [2006/03/22 15:11:02, 3] libads/sasl.c:ads_sasl_spnego_bind(210) ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 [2006/03/22 15:11:02, 3] libads/sasl.c:ads_sasl_spnego_bind(210) ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3 [2006/03/22 15:11:02, 3] libads/sasl.c:ads_sasl_spnego_bind(210) ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 [2006/03/22 15:11:02, 3] libads/sasl.c:ads_sasl_spnego_bind(219) ads_sasl_spnego_bind: got server principal name =corpad3$@CORP.YW.KELDA [2006/03/22 15:11:02, 3] libsmb/clikrb5.c:ads_krb5_mk_req(479) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) [2006/03/22 15:11:02, 0] libads/kerberos.c:ads_kinit_password(164) kerberos_kinit_password Administrator@CORP.YW.KELDA failed: Cannot resolve network address for KDC in requested realm [2006/03/22 15:11:02, 0] utils/net_ads.c:ads_startup(191) ads_connect: Cannot resolve network address for KDC in requested realm [2006/03/22 15:11:02, 2] utils/net.c:main(878) return code = -1 Find out how to protect your home from frost this winter at www.yorkshirewater.com YORKSHIRE WATER - WINNER OF THE UTILITY OF THE YEAR AWARD 2004 AND 2005 The information in this e-mail is confidential and may also be legally privileged. The contents are intended for recipient only and are subject to the legal notice available at http://www.keldagroup.com/email.htm Yorkshire Water Services Limited Registered Office Western House Halifax Road Bradford BD6 2SZ Registered in England and Wales No 2366682 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba