when i try to join the domain in UNIX (Sun Solaris 10 SPARC),i got error message like this bash-3.00# ./net ads -d3 join -U Administrator at SRE.COM [2010/09/29 14:26:02, 3] param/loadparm.c:(5055) lp_load: refreshing parameters [2010/09/29 14:26:02, 3] param/loadparm.c:(1440) Initialising global parameters [2010/09/29 14:26:02, 3] param/params.c:(572) params.c:pm_process() - Processing configuration file "/etc/sfw/smb.conf" [2010/09/29 14:26:02, 3] param/loadparm.c:(3794) Processing section "[global]" [2010/09/29 14:26:02, 2] lib/interface.c:(81) added interface ip=192.168.1.11 bcast=192.168.1.255 nmask=255.255.255.0 Host is not configured as a member server. Invalid configuration. Exiting.... Failed to join domain: Invalid domain role [2010/09/29 14:26:02, 2] utils/net.c:(1075) return code = -1 please help me solve this thanks
In your smb.conf did you set security = ADS You may want to check the man page for smb.conf and "security = " options. On 09/29/2010 07:33 AM, Ben George wrote:> when i try to join the domain in UNIX (Sun Solaris 10 SPARC),i got error > message like this > > > > bash-3.00# ./net ads -d3 join -U Administrator at SRE.COM > > [2010/09/29 14:26:02, 3] param/loadparm.c:(5055) > lp_load: refreshing parameters > [2010/09/29 14:26:02, 3] param/loadparm.c:(1440) > Initialising global parameters > [2010/09/29 14:26:02, 3] param/params.c:(572) > params.c:pm_process() - Processing configuration file "/etc/sfw/smb.conf" > [2010/09/29 14:26:02, 3] param/loadparm.c:(3794) > Processing section "[global]" > [2010/09/29 14:26:02, 2] lib/interface.c:(81) > added interface ip=192.168.1.11 bcast=192.168.1.255 nmask=255.255.255.0 > Host is not configured as a member server. > Invalid configuration. Exiting.... > Failed to join domain: Invalid domain role > [2010/09/29 14:26:02, 2] utils/net.c:(1075) > return code = -1 > > > please help me solve this > > thanks >
If you were able to join the domain, the you should see an account for your computer in the Active Directory Users and Groups MMC. Samba + Active Directory integration is not something I have worked with. You may need to keep reading through the documentation. I did find that the documentation on when nsswitch.conf has to use winbind is not very clear. I think you will also need to update /etc/nsswitch.conf e.g. passwd: files winbind group: files winbind This way "getent passwd" and "getent group" will also show the AD users, which may be necessary for making sure that the AD users are known by the unix file system. Since this machine is a domain member, I don't know if you need to define local users and groups on the samba server. On 09/29/2010 01:03 PM, Ben George wrote:> > > > > > HI > Thanks for your reply..me using.2003 server.. > > when i give the command in unix wbinfo -u ,it shows all the users in > AD and wbinfo -g shows the group.. > > after that....? > > bcoz i am beginner with this.actually i am working in linux,and i got > job on sun..so my manager gave this work to me > > only for me..:( > > so i don't know the correct procedures about the samba-AD > synchronization.. > > so please help me with these,for further steps. > > > > Again thanks for your reply > Ben.T.George > > > > > > > > > > > > > > > On Wed, Sep 29, 2010 at 4:04 PM, Gaiseric Vandal > <gaiseric.vandal at gmail.com <mailto:gaiseric.vandal at gmail.com>> wrote: > > In your smb.conf did you set > security = ADS > > > You may want to check the man page for smb.conf and "security = " > options. > > > > > On 09/29/2010 07:33 AM, Ben George wrote: > > when i try to join the domain in UNIX (Sun Solaris 10 SPARC),i > got error > message like this > > > > bash-3.00# ./net ads -d3 join -U Administrator at SRE.COM > <mailto:Administrator at SRE.COM> > > [2010/09/29 14:26:02, 3] param/loadparm.c:(5055) > lp_load: refreshing parameters > [2010/09/29 14:26:02, 3] param/loadparm.c:(1440) > Initialising global parameters > [2010/09/29 14:26:02, 3] param/params.c:(572) > params.c:pm_process() - Processing configuration file > "/etc/sfw/smb.conf" > [2010/09/29 14:26:02, 3] param/loadparm.c:(3794) > Processing section "[global]" > [2010/09/29 14:26:02, 2] lib/interface.c:(81) > added interface ip=192.168.1.11 bcast=192.168.1.255 > nmask=255.255.255.0 > Host is not configured as a member server. > Invalid configuration. Exiting.... > Failed to join domain: Invalid domain role > [2010/09/29 14:26:02, 2] utils/net.c:(1075) > return code = -1 > > > please help me solve this > > thanks > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
Can you post the global part of your smb.conf, your nsswitch and your kerberos.conf? On 9/29/10 5:33 AM, Ben George wrote:> when i try to join the domain in UNIX (Sun Solaris 10 SPARC),i got error > message like this > > > > bash-3.00# ./net ads -d3 join -U Administrator at SRE.COM > > [2010/09/29 14:26:02, 3] param/loadparm.c:(5055) > lp_load: refreshing parameters > [2010/09/29 14:26:02, 3] param/loadparm.c:(1440) > Initialising global parameters > [2010/09/29 14:26:02, 3] param/params.c:(572) > params.c:pm_process() - Processing configuration file "/etc/sfw/smb.conf" > [2010/09/29 14:26:02, 3] param/loadparm.c:(3794) > Processing section "[global]" > [2010/09/29 14:26:02, 2] lib/interface.c:(81) > added interface ip=192.168.1.11 bcast=192.168.1.255 nmask=255.255.255.0 > Host is not configured as a member server. > Invalid configuration. Exiting.... > Failed to join domain: Invalid domain role > [2010/09/29 14:26:02, 2] utils/net.c:(1075) > return code = -1 > > > please help me solve this > > thanks >-- Max Le?n Systems Director Wire Watchers : enterprise : technology : genius ------------------------------------------------------------------------------------------------------------------ Avenida 11 y Calle 7-9, Barrio Am?n, San Jos?, Costa Rica cel: +(506) 8364-6261 | fax: +(506) 2258-3695 email: mleon at wirewatchers.com <mailto:mleon at wirewatchers.com> | www.wirewatchers.com <http://www.wirewatchers.com> ------------------------------------------------------------------------------------------------------------------