samba - Feb 2014 - Unable to Join Samba server to AD windows server 2008 R2

Hi

We are facing some issue While joining samba server to AD

We have ClearCase VOB server on AIX 5.3 with TL 12  and SAMBA version 3.5.0 
installed on Aix server. The AD server is Windows 2008 R2. We are unable to 
Join  Samba server to AD .

Command: net ads join createcomputer=<OU> -U <username>

Please find the details smb.conf. Please  advice on resolving  this issue is
highly appreciated.



Smb.conf

global]

   workgroup = Netbiosname
   netbios name = hostname
   realm = GLOBAL.XXX.ORG
   encrypt passwords = yes
   server string = Hostname
   username map = /opt/pware64/lib/username.map
   password server = xxx.xx.xx.xx
   security = ADS
   load printers = yes
   local master = No
   domain master = No

   winbind separator = +
   winbind cache time = 10
   template shell = /bin/bash
   template homedir = /home/%D/%U
   idmap config * : range = 10000-20000

   log level = 5
   log file = /usr/local/samba/lib/log.%u
   include = /opt/pware64/lib/smb.conf.%u

   max log size = 1000

[homes]
   comment = Home Directories
   browseable = no
   writable = yes

; [netlogon]
;   comment = Network Logon Service
;   path = /usr/local/samba/lib/netlogon
;   guest ok = yes
;   writable = no
;   share modes = no


;[Profiles]
;    path = /usr/local/samba/profiles
;    browseable = no
;    guest ok = yes


[printers]
   comment = All Printers
   path = /usr/spool/samba
   browseable = no
   guest ok = no
   writable = no
   printable = yes


[vobs]
   comment = Public Stuff
   path = /vobs
   browseable = yes
   create mask = 0775
   directory mask = 0775
;  printable = no
   valid users = @ccuser
   read only = No


bash-4.0# smbclient -L global.tesco.org
Enter root's password:
Anonymous login successful
Domain=[DomainnameL] OS=[Windows Server 2008 R2 Enterprise 7601 Service Pack 1]
Server=[Windows Server 2008 R2 Enterprise 6.1]

        Sharename       Type      Comment
        ---------       ----      -------
Error returning browse list: NT_STATUS_ACCESS_DENIED
session request to GLOBAL.XXX.ORG failed (Called name not present)
session request to GLOBAL failed (Called name not present)
session request to *SMBSERVER failed (Called name not present)
NetBIOS over TCP disabled -- no workgroup available


Thanks and Regards
Niranjan

________________________________
This is a confidential email. Tesco may monitor and record all emails. The views
expressed in this email are those of the sender and not Tesco.

Tesco Stores Limited
Company Number: 519500
Registered in England
Registered Office: Tesco House, Delamare Road, Cheshunt, Hertfordshire EN8 9SL
VAT Registration Number: GB 220 4302 31

Hi Murthy,
> We are facing some issue While joining samba server to AD
>
> We have ClearCase VOB server on AIX 5.3 with TL 12  and SAMBA version 3.5.0
installed on Aix server. The AD server is Windows 2008 R2. We are unable to 
Join  Samba server to AD .
>
> Command: net ads join createcomputer=<OU> -U <username>
>
> Please find the details smb.conf. Please  advice on resolving  this issue
is highly appreciated.
You didn't provide your krb5.conf file. Does "kinit anyusername "
works
on command line? Is winbind running? does wbinfo -t or wbinfo -u runs 
fine? If those don't work properly yet, smbclient won't work anyway. You
should check also your resolv.conf so that search domain and nameserver 
points properly to your MS AD server.

Cheers,

>
>
>
> Smb.conf
>
> global]
>
>     workgroup = Netbiosname
>     netbios name = hostname
>     realm = GLOBAL.XXX.ORG
>     encrypt passwords = yes
>     server string = Hostname
>     username map = /opt/pware64/lib/username.map
>     password server = xxx.xx.xx.xx
>     security = ADS
>     load printers = yes
>     local master = No
>     domain master = No
>
>     winbind separator = +
>     winbind cache time = 10
>     template shell = /bin/bash
>     template homedir = /home/%D/%U
>     idmap config * : range = 10000-20000
>
>     log level = 5
>     log file = /usr/local/samba/lib/log.%u
>     include = /opt/pware64/lib/smb.conf.%u
>
>     max log size = 1000
>
> [homes]
>     comment = Home Directories
>     browseable = no
>     writable = yes
>
> ; [netlogon]
> ;   comment = Network Logon Service
> ;   path = /usr/local/samba/lib/netlogon
> ;   guest ok = yes
> ;   writable = no
> ;   share modes = no
>
>
> ;[Profiles]
> ;    path = /usr/local/samba/profiles
> ;    browseable = no
> ;    guest ok = yes
>
>
> [printers]
>     comment = All Printers
>     path = /usr/spool/samba
>     browseable = no
>     guest ok = no
>     writable = no
>     printable = yes
>
>
> [vobs]
>     comment = Public Stuff
>     path = /vobs
>     browseable = yes
>     create mask = 0775
>     directory mask = 0775
> ;  printable = no
>     valid users = @ccuser
>     read only = No
>
>
> bash-4.0# smbclient -L global.tesco.org
> Enter root's password:
> Anonymous login successful
> Domain=[DomainnameL] OS=[Windows Server 2008 R2 Enterprise 7601 Service
Pack 1] Server=[Windows Server 2008 R2 Enterprise 6.1]
>
>          Sharename       Type      Comment
>          ---------       ----      -------
> Error returning browse list: NT_STATUS_ACCESS_DENIED
> session request to GLOBAL.XXX.ORG failed (Called name not present)
> session request to GLOBAL failed (Called name not present)
> session request to *SMBSERVER failed (Called name not present)
> NetBIOS over TCP disabled -- no workgroup available
>
>
> Thanks and Regards
> Niranjan
>
> ________________________________
> This is a confidential email. Tesco may monitor and record all emails. The
views expressed in this email are those of the sender and not Tesco.
>
> Tesco Stores Limited
> Company Number: 519500
> Registered in England
> Registered Office: Tesco House, Delamare Road, Cheshunt, Hertfordshire EN8
9SL
> VAT Registration Number: GB 220 4302 31
>

-- 
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, b?timent A
12 avenue Jules Verne
44230 Saint S?bastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil-it-systems.fr

On Thu, 2014-02-20 at 15:26 +0530, Murthy, Niranjan
wrote:
> Hi
> 
> We are facing some issue While joining samba server to AD
> 
> We have ClearCase VOB server on AIX 5.3 with TL 12  and SAMBA version 3.5.0
installed on Aix server. The AD server is Windows 2008 R2. We are unable to 
Join  Samba server to AD .
> 
> Command: net ads join createcomputer=<OU> -U <username>
Hi.?

What's the output from the join command?
Can you:
kinit Administrator?
Does the primary DNS point at the DC?
HTH