Hi Samba people
I'm trying to join a Solari10 server using Samba Version 3.0.33 server
to an ADS. But the ADS is not in DNS.
I thought I could get round this by putting the ADS IP in the servers
local hosts file, and telling the krb5.conf not to use dns but it
doesn't seem to work.
1. Can it be done ?
2. If it can how ?
Output of my net join ads, still seems to be using DNS
[root at fgukshppay001] # /usr/sfw/sbin/net ads join -U admandymarr -d3
[2009/09/16 15:01:42, 3] param/loadparm.c:(5055)
lp_load: refreshing parameters
[2009/09/16 15:01:42, 3] param/loadparm.c:(1440)
Initialising global parameters
[2009/09/16 15:01:42, 3] param/params.c:(572)
params.c:pm_process() - Processing configuration file
"/etc/sfw/smb.conf"
[2009/09/16 15:01:42, 3] param/loadparm.c:(3794)
Processing section "[global]"
[2009/09/16 15:01:42, 2] lib/interface.c:(81)
added interface ip=10.193.69.100 bcast=10.193.69.255
nmask=255.255.255.0
[2009/09/16 15:01:42, 2] lib/interface.c:(81)
added interface ip=10.193.69.101 bcast=10.193.69.255
nmask=255.255.255.0
[2009/09/16 15:01:42, 2] lib/interface.c:(81)
added interface ip=172.30.61.177 bcast=172.30.61.255
nmask=255.255.255.0
[2009/09/16 15:01:42, 2] lib/interface.c:(81)
added interface ip=172.30.61.178 bcast=172.30.61.255
nmask=255.255.255.0
[2009/09/16 15:01:42, 2] lib/interface.c:(81)
added interface ip=10.193.69.102 bcast=10.193.69.255
nmask=255.255.255.0
[2009/09/16 15:01:42, 2] lib/interface.c:(81)
added interface ip=172.30.61.179 bcast=172.30.61.255
nmask=255.255.255.0
[2009/09/16 15:01:42, 2] lib/interface.c:(81)
added interface ip=192.168.1.2 bcast=192.168.1.255 nmask=255.255.255.0
[2009/09/16 15:01:42, 3] libsmb/namequery.c:(1495)
get_dc_list: preferred server list: ", *"
[2009/09/16 15:01:42, 3] libads/dns.c:(303)
ads_dns_lookup_srv: Failed to resolve
_ldap._tcp.dc._msdcs.FGPREPROD.COM (Error 0)
[2009/09/16 15:01:42, 3] libads/dns.c:(363)
ads_dns_lookup_srv: Failed to send DNS query (NT_STATUS_UNSUCCESSFUL)
[2009/09/16 15:01:42, 3] libsmb/namequery.c:(1495)
get_dc_list: preferred server list: ", *"
[2009/09/16 15:01:42, 3] libsmb/namequery.c:(966)
resolve_lmhosts: Attempting lmhosts lookup for name
FGPREPROD.COM<0x1c>
[2009/09/16 15:01:42, 3] libsmb/namequery.c:(863)
resolve_wins: Attempting wins lookup for name FGPREPROD.COM<0x1c>
[2009/09/16 15:01:42, 3] libsmb/namequery.c:(866)
resolve_wins: WINS server resolution selected and no WINS servers
listed.
[2009/09/16 15:01:42, 3] libsmb/namequery.c:(805)
name_resolve_bcast: Attempting broadcast lookup for name
FGPREPROD.COM<0x1c>
[2009/09/16 15:01:48, 3] libsmb/namequery.c:(1495)
get_dc_list: preferred server list: ", *"
[2009/09/16 15:01:48, 3] libsmb/namequery.c:(966)
resolve_lmhosts: Attempting lmhosts lookup for name FGPREPROD<0x1c>
[2009/09/16 15:01:48, 3] libsmb/namequery.c:(863)
resolve_wins: Attempting wins lookup for name FGPREPROD<0x1c>
[2009/09/16 15:01:48, 3] libsmb/namequery.c:(866)
resolve_wins: WINS server resolution selected and no WINS servers
listed.
[2009/09/16 15:01:48, 3] libsmb/namequery.c:(805)
name_resolve_bcast: Attempting broadcast lookup for name
FGPREPROD<0x1c>
[2009/09/16 15:01:55, 3] libsmb/namequery_dc.c:(162)
Could not look up dc's for domain FGPREPROD
admandymarr's password:
[2009/09/16 15:02:00, 3] libsmb/namequery.c:(1495)
get_dc_list: preferred server list: ", *"
[2009/09/16 15:02:00, 3] libads/dns.c:(303)
ads_dns_lookup_srv: Failed to resolve
_ldap._tcp.dc._msdcs.FGPREPROD.COM (Error 0)
[2009/09/16 15:02:00, 3] libads/dns.c:(363)
ads_dns_lookup_srv: Failed to send DNS query (NT_STATUS_UNSUCCESSFUL)
[2009/09/16 15:02:00, 3] libsmb/namequery.c:(1495)
get_dc_list: preferred server list: ", *"
[2009/09/16 15:02:00, 3] libsmb/namequery.c:(966)
resolve_lmhosts: Attempting lmhosts lookup for name
FGPREPROD.COM<0x1c>
[2009/09/16 15:02:00, 3] libsmb/namequery.c:(863)
resolve_wins: Attempting wins lookup for name FGPREPROD.COM<0x1c>
[2009/09/16 15:02:00, 3] libsmb/namequery.c:(866)
resolve_wins: WINS server resolution selected and no WINS servers
listed.
[2009/09/16 15:02:00, 3] libsmb/namequery.c:(805)
name_resolve_bcast: Attempting broadcast lookup for name
FGPREPROD.COM<0x1c>
[2009/09/16 15:02:06, 0] utils/net_ads.c:(286)
ads_connect: No logon servers
[2009/09/16 15:02:06, 1] utils/net_ads.c:(1470)
error on ads_startup: No logon servers
Failed to join domain: No logon servers
[2009/09/16 15:02:06, 2] utils/net.c:(1075)
return code = -1
My krb5.conf
[libdefaults]
default_realm = FGPREPROD.COM
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
FGPREPROD.COM = {
kdc = fgukcbradc001.XXDOMAINXX.com
admin_server = fgukcbradc001.XXDOMAINXX.com
}
[domain_realm]
.fgpreprod.com = FGPREPROD.COM
.subdomain.fgpreprod.com = FGPREPROD.COM
[logging]
default = FILE:/var/krb5/kdc.log
kdc = FILE:/var/krb5/kdc.log
kdc_rotate = {
period = 1d
version = 10
}
[appdefaults]
kinit = {
renewable = true
forwardable= true
}
My smb.conf
[global]
workgroup = FGPREPROD
server string = Samba Server
security = ADS
realm = FGPREPROD.COM
encrypt passwords = yes
log level = 3
log file = /var/samba/log/log.%m
max log size = 250
printcap name = /dev/null
template shell = /bin/bash
[lswwusers]
comment = lswwusers
path = /mirror/livesww/users
valid users = admandymarr smbtest
public = yes
browseable = yes
read only = yes
Entery in my /etc/hosts for the ADS server
10.193.33.133 fgukcbradc001.XXMYDOMAINXX.com fgpreprod.com
FGPREPROD.COM
XXMYDOMAINXX has replace the domain I'm working in, just incase they are
not happy about me posting internal info on the net :-(
Many thanks
Andy