[Samba] Samba4 error joining W2003 DC

Gémes Géza
2012-01-10T18:03:19Z

2012-01-10 11:34 keltez?ssel, Juan Pablo Lorier ?rta:
> Hi there,
>
> I'm a newy at samba 4 and I'm trying to joing a samba 4 alpha 17
box to our domain as a DC so I can "drain" the domain info and use the
linux box to test samba without disturbing the domain itself.
> The thing is that I get an error when trying to join the server :
>
> [root at vpdc samba]# bin/samba-tool domain join montecarlotv.com.uy DC
-Uadministrador --realm=montecarlotv.com.uy
> Finding a writeable DC for domain 'montecarlotv.com.uy'
> Found DC srv-mm.montecarlotv.com.uy
> Password for [WORKGROUP\administrador]:
> workgroup is CANAL4
> realm is montecarlotv.com.uy
> checking samaccountname
> Adding CN=VPDC,OU=Domain Controllers,DC=montecarlotv,DC=com,DC=uy
> Adding
CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
> Adding CN=NTDS
Settings,CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
> DsAddEntry failed with status (5, 'WERR_ACCESS_DENIED') info (8567,
'WERR_DS_INCOMPATIBLE_VERSION')
> Join failed - cleaning up
> checking samaccountname
> Deleted CN=VPDC,OU=Domain Controllers,DC=montecarlotv,DC=com,DC=uy
> Deleted
CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
> ERROR(runtime): uncaught exception - DsAddEntry failed
>   File
"/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py",
line 167, in _run
>     return self.run(*args, **kwargs)
>   File
"/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/domain.py",
line 162, in run
>     machinepass=machinepass)
>   File
"/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
949, in join_DC
>     ctx.do_join()
>   File
"/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
854, in do_join
>     ctx.join_add_objects()
>   File
"/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
467, in join_add_objects
>     ctx.join_add_ntdsdsa()
>   File
"/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
416, in join_add_ntdsdsa
>     ctx.DsAddEntry([rec])
>   File
"/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
379, in DsAddEntry
>     raise RuntimeError("DsAddEntry failed")
>
>
> The only thing that calls my atention is that instead of asking for
CANAL4\administrador password is asking WORKGROUP\administrador.
> Any Ideas?
> Thanks,
In my experience the prerequisite of  a successful join is to have a
well configured smb.conf.
You should put (at least) your domains netbios name under workgroup and
your domains name under realm before you would attempt to join.

Regards

Geza