hi,
I trying to join a samba 3.5.6 (debian) on a domain W2K8 without
kerberos followin the wiki page
(http://wiki.samba.org/index.php/Samba_&_Active_Directory)
using net ads join i've got this error Failed to join domain: failed to
join domain 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED
conf in /etc/smb.conf
workgroup = MYDOMAIN
server string = %h server
# allow trusted domains = no
realm = MYDOMAIN.COM
password server = mntphone001.mydomain.com
preferred master = no
security = ADS
encrypt passwords = yes
log level = 5
log file = /var/log/samba/%m
max log size = 50
printcap name = cups
printing = cups
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind nested groups = Yes
winbind separator = +
idmap uid = 2000-20000
idmap gid = 2000-20000
client use spnego = yes
;template primary group = "Domain Users"
template shell = /bin/bash
auth methods = winbind
log i have when i do
net ads join -Umylogin%passwd -S mntphone001.mydomain.com -d 2
rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
[2011/03/02 13:24:00.801641, 2] lib/interface.c:340(add_interface)
added interface eth0 ip=fe80::213:72ff:fe56:6db6%eth0
bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff::
[2011/03/02 13:24:00.801787, 2] lib/interface.c:340(add_interface)
added interface eth0 ip=172.23.36.4 bcast=172.23.36.255
netmask=255.255.255.0
[2011/03/02 13:24:00.802018, 1] libnet/libnet_join.c:1947(libnet_Join)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
in: struct libnet_JoinCtx
dc_name : 'mntphone001.mydomain.com'
machine_name : 'MNTSLX001'
domain_name : *
domain_name : 'MYDOMAIN.COM'
account_ou : NULL
admin_account : 'mylogin'
admin_password : *
machine_password : NULL
join_flags : 0x00000023 (35)
0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS
0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
0: WKSSVC_JOIN_FLAGS_DEFER_SPN
0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
os_version : NULL
os_name : NULL
create_upn : 0x00 (0)
upn : NULL
modify_config : 0x00 (0)
ads : NULL
debug : 0x01 (1)
use_kerberos : 0x00 (0)
secure_channel_type : SEC_CHAN_WKSTA (2)
[2011/03/02 13:24:00.814776, 1] libnet/libnet_join.c:1978(libnet_Join)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
out: struct libnet_JoinCtx
account_name : NULL
netbios_domain_name : 'MYDOMAIN'
dns_domain_name : 'mydomain.com'
forest_name : 'root.com'
dn : NULL
domain_sid : *
domain_sid :
S-1-5-21-796845957-790525478-725345543
modified_config : 0x00 (0)
error_string : 'failed to join domain
'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED'
domain_is_ad : 0x01 (1)
result : WERR_NOT_SUPPORTED
[2011/03/02 13:24:00.815116, 2] utils/net.c:916(main)
return code = -1
Failed to join domain: failed to join domain 'MYDOMAIN.COM' over rpc:
NT_STATUS_NOT_SUPPORTED
> > hi, > I trying to join a samba 3.5.6 (debian) on a domain W2K8 without > kerberos followin the wiki page > (http://wiki.samba.org/index.php/Samba_&_Active_Directory) > using net ads joinads implies kerberos> > > > i've got this error Failed to join domain: failed to > join domain 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED > > conf in /etc/smb.conf > workgroup = MYDOMAIN > > server string = %h server > # allow trusted domains = no > realm = MYDOMAIN.COM > password server = mntphone001.mydomain.com > preferred master = no > security = ADS > encrypt passwords = yes > log level = 5 > log file = /var/log/samba/%m > max log size = 50 > printcap name = cups > printing = cups > winbind enum users = Yes > winbind enum groups = Yes > winbind use default domain = Yes > winbind nested groups = Yes > winbind separator = + > idmap uid = 2000-20000 > idmap gid = 2000-20000 > client use spnego = yes > ;template primary group = "Domain Users" > template shell = /bin/bash > auth methods = winbind > > > log i have when i do > net ads join -Umylogin%passwd -S mntphone001.mydomain.com -d 2 > rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) > [2011/03/02 13:24:00.801641, 2] lib/interface.c:340(add_interface) > added interface eth0 ip=fe80::213:72ff:fe56:6db6%eth0 > bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: > [2011/03/02 13:24:00.801787, 2] lib/interface.c:340(add_interface) > added interface eth0 ip=172.23.36.4 bcast=172.23.36.255 > netmask=255.255.255.0 > [2011/03/02 13:24:00.802018, 1] > libnet/libnet_join.c:1947(libnet_Join) > libnet_Join: > libnet_JoinCtx: struct libnet_JoinCtx > in: struct libnet_JoinCtx > dc_name : > 'mntphone001.mydomain.com' > machine_name : 'MNTSLX001' > domain_name : * > domain_name : > 'MYDOMAIN.COM' > account_ou : NULL > admin_account : 'mylogin' > admin_password : * > machine_password : NULL > join_flags : 0x00000023 > (35) > 0: > WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS > 0: > WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME > 0: > WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT > 0: > WKSSVC_JOIN_FLAGS_DEFER_SPN > 0: > WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED > 0: > WKSSVC_JOIN_FLAGS_JOIN_UNSECURE > 1: > WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED > 0: > WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE > 0: > WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE > 1: > WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE > 1: > WKSSVC_JOIN_FLAGS_JOIN_TYPE > os_version : NULL > os_name : NULL > create_upn : 0x00 (0) > upn : NULL > modify_config : 0x00 (0) > ads : NULL > debug : 0x01 (1) > use_kerberos : 0x00 (0) > secure_channel_type : SEC_CHAN_WKSTA > (2) > [2011/03/02 13:24:00.814776, 1] > libnet/libnet_join.c:1978(libnet_Join) > libnet_Join: > libnet_JoinCtx: struct libnet_JoinCtx > out: struct libnet_JoinCtx > account_name : NULL > netbios_domain_name : 'MYDOMAIN' > dns_domain_name : 'mydomain.com' > forest_name : 'root.com' > dn : NULL > domain_sid : * > domain_sid : > S-1-5-21-796845957-790525478-725345543 > modified_config : 0x00 (0) > error_string : 'failed to > join domain > 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED' > domain_is_ad : 0x01 (1) > result : > WERR_NOT_SUPPORTED > [2011/03/02 13:24:00.815116, 2] utils/net.c:916(main) > return code = -1 > Failed to join domain: failed to join domain 'MYDOMAIN.COM' over rpc: > NT_STATUS_NOT_SUPPORTED > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
sorry for the mistake I meant with ADS In fact the problem is the domain controller in have use in my conf was a second controller in read only so it could not work thank Le 02/03/2011 13:58, zorg a ?crit :> hi, > I trying to join a samba 3.5.6 (debian) on a domain W2K8 without > kerberos followin the wiki page > (http://wiki.samba.org/index.php/Samba_&_Active_Directory) > using net ads join i've got this error Failed to join domain: failed > to join domain 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED > > conf in /etc/smb.conf > workgroup = MYDOMAIN > > server string = %h server > # allow trusted domains = no > realm = MYDOMAIN.COM > password server = mntphone001.mydomain.com > preferred master = no > security = ADS > encrypt passwords = yes > log level = 5 > log file = /var/log/samba/%m > max log size = 50 > printcap name = cups > printing = cups > winbind enum users = Yes > winbind enum groups = Yes > winbind use default domain = Yes > winbind nested groups = Yes > winbind separator = + > idmap uid = 2000-20000 > idmap gid = 2000-20000 > client use spnego = yes > ;template primary group = "Domain Users" > template shell = /bin/bash > auth methods = winbind > > > log i have when i do > net ads join -Umylogin%passwd -S mntphone001.mydomain.com -d 2 > rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) > [2011/03/02 13:24:00.801641, 2] lib/interface.c:340(add_interface) > added interface eth0 ip=fe80::213:72ff:fe56:6db6%eth0 > bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: > [2011/03/02 13:24:00.801787, 2] lib/interface.c:340(add_interface) > added interface eth0 ip=172.23.36.4 bcast=172.23.36.255 > netmask=255.255.255.0 > [2011/03/02 13:24:00.802018, 1] libnet/libnet_join.c:1947(libnet_Join) > libnet_Join: > libnet_JoinCtx: struct libnet_JoinCtx > in: struct libnet_JoinCtx > dc_name : 'mntphone001.mydomain.com' > machine_name : 'MNTSLX001' > domain_name : * > domain_name : 'MYDOMAIN.COM' > account_ou : NULL > admin_account : 'mylogin' > admin_password : * > machine_password : NULL > join_flags : 0x00000023 (35) > 0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS > 0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME > 0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT > 0: WKSSVC_JOIN_FLAGS_DEFER_SPN > 0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED > 0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE > 1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED > 0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE > 0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE > 1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE > 1: WKSSVC_JOIN_FLAGS_JOIN_TYPE > os_version : NULL > os_name : NULL > create_upn : 0x00 (0) > upn : NULL > modify_config : 0x00 (0) > ads : NULL > debug : 0x01 (1) > use_kerberos : 0x00 (0) > secure_channel_type : SEC_CHAN_WKSTA (2) > [2011/03/02 13:24:00.814776, 1] libnet/libnet_join.c:1978(libnet_Join) > libnet_Join: > libnet_JoinCtx: struct libnet_JoinCtx > out: struct libnet_JoinCtx > account_name : NULL > netbios_domain_name : 'MYDOMAIN' > dns_domain_name : 'mydomain.com' > forest_name : 'root.com' > dn : NULL > domain_sid : * > domain_sid : > S-1-5-21-796845957-790525478-725345543 > modified_config : 0x00 (0) > error_string : 'failed to join domain > 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED' > domain_is_ad : 0x01 (1) > result : WERR_NOT_SUPPORTED > [2011/03/02 13:24:00.815116, 2] utils/net.c:916(main) > return code = -1 > Failed to join domain: failed to join domain 'MYDOMAIN.COM' over rpc: > NT_STATUS_NOT_SUPPORTED >
Apparently Analagous Threads
- Able to join Samba client as MEMBER server to Windows 2008 R2 RWDC but not to RODC
- Failed to join domain: failed to set machine spn: Constraint violation
- Compiling SAMBA on Solaris 10 to use AD on Windows 2008 server
- Join multiple CTDB managed Samba servers into Active Directory
- failed to lookup DC info for domain 'xxx.com' over rpc