hi, I trying to join a samba 3.5.6 (debian) on a domain W2K8 without kerberos followin the wiki page (http://wiki.samba.org/index.php/Samba_&_Active_Directory) using net ads join i've got this error Failed to join domain: failed to join domain 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED conf in /etc/smb.conf workgroup = MYDOMAIN server string = %h server # allow trusted domains = no realm = MYDOMAIN.COM password server = mntphone001.mydomain.com preferred master = no security = ADS encrypt passwords = yes log level = 5 log file = /var/log/samba/%m max log size = 50 printcap name = cups printing = cups winbind enum users = Yes winbind enum groups = Yes winbind use default domain = Yes winbind nested groups = Yes winbind separator = + idmap uid = 2000-20000 idmap gid = 2000-20000 client use spnego = yes ;template primary group = "Domain Users" template shell = /bin/bash auth methods = winbind log i have when i do net ads join -Umylogin%passwd -S mntphone001.mydomain.com -d 2 rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) [2011/03/02 13:24:00.801641, 2] lib/interface.c:340(add_interface) added interface eth0 ip=fe80::213:72ff:fe56:6db6%eth0 bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: [2011/03/02 13:24:00.801787, 2] lib/interface.c:340(add_interface) added interface eth0 ip=172.23.36.4 bcast=172.23.36.255 netmask=255.255.255.0 [2011/03/02 13:24:00.802018, 1] libnet/libnet_join.c:1947(libnet_Join) libnet_Join: libnet_JoinCtx: struct libnet_JoinCtx in: struct libnet_JoinCtx dc_name : 'mntphone001.mydomain.com' machine_name : 'MNTSLX001' domain_name : * domain_name : 'MYDOMAIN.COM' account_ou : NULL admin_account : 'mylogin' admin_password : * machine_password : NULL join_flags : 0x00000023 (35) 0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS 0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME 0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT 0: WKSSVC_JOIN_FLAGS_DEFER_SPN 0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED 0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE 1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED 0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE 0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE 1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE 1: WKSSVC_JOIN_FLAGS_JOIN_TYPE os_version : NULL os_name : NULL create_upn : 0x00 (0) upn : NULL modify_config : 0x00 (0) ads : NULL debug : 0x01 (1) use_kerberos : 0x00 (0) secure_channel_type : SEC_CHAN_WKSTA (2) [2011/03/02 13:24:00.814776, 1] libnet/libnet_join.c:1978(libnet_Join) libnet_Join: libnet_JoinCtx: struct libnet_JoinCtx out: struct libnet_JoinCtx account_name : NULL netbios_domain_name : 'MYDOMAIN' dns_domain_name : 'mydomain.com' forest_name : 'root.com' dn : NULL domain_sid : * domain_sid : S-1-5-21-796845957-790525478-725345543 modified_config : 0x00 (0) error_string : 'failed to join domain 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED' domain_is_ad : 0x01 (1) result : WERR_NOT_SUPPORTED [2011/03/02 13:24:00.815116, 2] utils/net.c:916(main) return code = -1 Failed to join domain: failed to join domain 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED
> > hi, > I trying to join a samba 3.5.6 (debian) on a domain W2K8 without > kerberos followin the wiki page > (http://wiki.samba.org/index.php/Samba_&_Active_Directory) > using net ads joinads implies kerberos> > > > i've got this error Failed to join domain: failed to > join domain 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED > > conf in /etc/smb.conf > workgroup = MYDOMAIN > > server string = %h server > # allow trusted domains = no > realm = MYDOMAIN.COM > password server = mntphone001.mydomain.com > preferred master = no > security = ADS > encrypt passwords = yes > log level = 5 > log file = /var/log/samba/%m > max log size = 50 > printcap name = cups > printing = cups > winbind enum users = Yes > winbind enum groups = Yes > winbind use default domain = Yes > winbind nested groups = Yes > winbind separator = + > idmap uid = 2000-20000 > idmap gid = 2000-20000 > client use spnego = yes > ;template primary group = "Domain Users" > template shell = /bin/bash > auth methods = winbind > > > log i have when i do > net ads join -Umylogin%passwd -S mntphone001.mydomain.com -d 2 > rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) > [2011/03/02 13:24:00.801641, 2] lib/interface.c:340(add_interface) > added interface eth0 ip=fe80::213:72ff:fe56:6db6%eth0 > bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: > [2011/03/02 13:24:00.801787, 2] lib/interface.c:340(add_interface) > added interface eth0 ip=172.23.36.4 bcast=172.23.36.255 > netmask=255.255.255.0 > [2011/03/02 13:24:00.802018, 1] > libnet/libnet_join.c:1947(libnet_Join) > libnet_Join: > libnet_JoinCtx: struct libnet_JoinCtx > in: struct libnet_JoinCtx > dc_name : > 'mntphone001.mydomain.com' > machine_name : 'MNTSLX001' > domain_name : * > domain_name : > 'MYDOMAIN.COM' > account_ou : NULL > admin_account : 'mylogin' > admin_password : * > machine_password : NULL > join_flags : 0x00000023 > (35) > 0: > WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS > 0: > WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME > 0: > WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT > 0: > WKSSVC_JOIN_FLAGS_DEFER_SPN > 0: > WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED > 0: > WKSSVC_JOIN_FLAGS_JOIN_UNSECURE > 1: > WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED > 0: > WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE > 0: > WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE > 1: > WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE > 1: > WKSSVC_JOIN_FLAGS_JOIN_TYPE > os_version : NULL > os_name : NULL > create_upn : 0x00 (0) > upn : NULL > modify_config : 0x00 (0) > ads : NULL > debug : 0x01 (1) > use_kerberos : 0x00 (0) > secure_channel_type : SEC_CHAN_WKSTA > (2) > [2011/03/02 13:24:00.814776, 1] > libnet/libnet_join.c:1978(libnet_Join) > libnet_Join: > libnet_JoinCtx: struct libnet_JoinCtx > out: struct libnet_JoinCtx > account_name : NULL > netbios_domain_name : 'MYDOMAIN' > dns_domain_name : 'mydomain.com' > forest_name : 'root.com' > dn : NULL > domain_sid : * > domain_sid : > S-1-5-21-796845957-790525478-725345543 > modified_config : 0x00 (0) > error_string : 'failed to > join domain > 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED' > domain_is_ad : 0x01 (1) > result : > WERR_NOT_SUPPORTED > [2011/03/02 13:24:00.815116, 2] utils/net.c:916(main) > return code = -1 > Failed to join domain: failed to join domain 'MYDOMAIN.COM' over rpc: > NT_STATUS_NOT_SUPPORTED > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
sorry for the mistake I meant with ADS In fact the problem is the domain controller in have use in my conf was a second controller in read only so it could not work thank Le 02/03/2011 13:58, zorg a ?crit :> hi, > I trying to join a samba 3.5.6 (debian) on a domain W2K8 without > kerberos followin the wiki page > (http://wiki.samba.org/index.php/Samba_&_Active_Directory) > using net ads join i've got this error Failed to join domain: failed > to join domain 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED > > conf in /etc/smb.conf > workgroup = MYDOMAIN > > server string = %h server > # allow trusted domains = no > realm = MYDOMAIN.COM > password server = mntphone001.mydomain.com > preferred master = no > security = ADS > encrypt passwords = yes > log level = 5 > log file = /var/log/samba/%m > max log size = 50 > printcap name = cups > printing = cups > winbind enum users = Yes > winbind enum groups = Yes > winbind use default domain = Yes > winbind nested groups = Yes > winbind separator = + > idmap uid = 2000-20000 > idmap gid = 2000-20000 > client use spnego = yes > ;template primary group = "Domain Users" > template shell = /bin/bash > auth methods = winbind > > > log i have when i do > net ads join -Umylogin%passwd -S mntphone001.mydomain.com -d 2 > rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) > [2011/03/02 13:24:00.801641, 2] lib/interface.c:340(add_interface) > added interface eth0 ip=fe80::213:72ff:fe56:6db6%eth0 > bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: > [2011/03/02 13:24:00.801787, 2] lib/interface.c:340(add_interface) > added interface eth0 ip=172.23.36.4 bcast=172.23.36.255 > netmask=255.255.255.0 > [2011/03/02 13:24:00.802018, 1] libnet/libnet_join.c:1947(libnet_Join) > libnet_Join: > libnet_JoinCtx: struct libnet_JoinCtx > in: struct libnet_JoinCtx > dc_name : 'mntphone001.mydomain.com' > machine_name : 'MNTSLX001' > domain_name : * > domain_name : 'MYDOMAIN.COM' > account_ou : NULL > admin_account : 'mylogin' > admin_password : * > machine_password : NULL > join_flags : 0x00000023 (35) > 0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS > 0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME > 0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT > 0: WKSSVC_JOIN_FLAGS_DEFER_SPN > 0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED > 0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE > 1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED > 0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE > 0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE > 1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE > 1: WKSSVC_JOIN_FLAGS_JOIN_TYPE > os_version : NULL > os_name : NULL > create_upn : 0x00 (0) > upn : NULL > modify_config : 0x00 (0) > ads : NULL > debug : 0x01 (1) > use_kerberos : 0x00 (0) > secure_channel_type : SEC_CHAN_WKSTA (2) > [2011/03/02 13:24:00.814776, 1] libnet/libnet_join.c:1978(libnet_Join) > libnet_Join: > libnet_JoinCtx: struct libnet_JoinCtx > out: struct libnet_JoinCtx > account_name : NULL > netbios_domain_name : 'MYDOMAIN' > dns_domain_name : 'mydomain.com' > forest_name : 'root.com' > dn : NULL > domain_sid : * > domain_sid : > S-1-5-21-796845957-790525478-725345543 > modified_config : 0x00 (0) > error_string : 'failed to join domain > 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED' > domain_is_ad : 0x01 (1) > result : WERR_NOT_SUPPORTED > [2011/03/02 13:24:00.815116, 2] utils/net.c:916(main) > return code = -1 > Failed to join domain: failed to join domain 'MYDOMAIN.COM' over rpc: > NT_STATUS_NOT_SUPPORTED >
Maybe Matching Threads
- Able to join Samba client as MEMBER server to Windows 2008 R2 RWDC but not to RODC
- Failed to join domain: failed to set machine spn: Constraint violation
- Compiling SAMBA on Solaris 10 to use AD on Windows 2008 server
- Join multiple CTDB managed Samba servers into Active Directory
- failed to lookup DC info for domain 'xxx.com' over rpc