samba - Jan 2012 - To Andrew Barlett regarding 'WERR_ACCESS_DENIED'

Dear Andrew,

I know you may not have time for this, but I found a list message from you in
August ([cifs-protocol] Errors when doing a DsAddEntry ) where you show quite
the same error I get when I try to join Samba 4a17 to a W2003 domain.
I get to add partialy the server to the domain, but fails with
"WERR_ACCESS_DENIED" at some point. I've searchead the web without
finding a solution and posted in the list also with not much help. The output is
this:

[root at vpdc samba]# bin/samba-tool domain join montecarlotv.com.uy DC
-Uadministrador --realm=montecarlotv.com.uy
Finding a writeable DC for domain 'montecarlotv.com.uy'
Found DC ads1.montecarlotv.com.uy
Password for [CANAL4\administrador]:
workgroup is CANAL4
realm is montecarlotv.com.uy
checking samaccountname
Deleted CN=RID Set,CN=VPDC,OU=Domain Controllers,DC=montecarlotv,DC=com,DC=uy
Deleted CN=VPDC,OU=Domain Controllers,DC=montecarlotv,DC=com,DC=uy
Deleted CN=NTDS
Settings,CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
Deleted
CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
Adding CN=VPDC,OU=Domain Controllers,DC=montecarlotv,DC=com,DC=uy
Adding
CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
Adding CN=NTDS
Settings,CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
DsAddEntry failed with status (5, 'WERR_ACCESS_DENIED') info (8567,
'WERR_DS_INCOMPATIBLE_VERSION')
Join failed - cleaning up
checking samaccountname
Deleted CN=VPDC,OU=Domain Controllers,DC=montecarlotv,DC=com,DC=uy
Deleted
CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
ERROR(runtime): uncaught exception - DsAddEntry failed
? File
"/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py",
line 167, in _run
??? return self.run(*args, **kwargs)
? File
"/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/domain.py",
line 162, in run
??? machinepass=machinepass)
? File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py",
line 949, in join_DC
??? ctx.do_join()
? File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py",
line 854, in do_join
??? ctx.join_add_objects()
? File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py",
line 467, in join_add_objects
??? ctx.join_add_ntdsdsa()
? File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py",
line 416, in join_add_ntdsdsa
??? ctx.DsAddEntry([rec])
? File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py",
line 379, in DsAddEntry
??? raise RuntimeError("DsAddEntry failed")


If I can find help you with some more data, please, don't hesitate in
asking.
Regards,