samba - Jan 2015 - net ads join fails when specifying domain controller

I am seeing in some folks Active Directory environments where specifying
a domain controller with the net ads join command fails. It will work
when not specifying a domain controller. For instance:

net -k ads join FOO.COM -S DC.FOO.COM  # fails

net -k ads join FOO.COM # works

The fail message is:

Failed to join domain: failed to lookup DC info for domain 'FOO.COM'
over rpc: Logon failure

When successful, the same domain controller that fails when specified,
is actually the domain controller that is picked by the net ads join!

Any ideas here? I'm stumped.

- John

On Fri, Jan 16, 2015 at 07:37:53PM -0800, John Hixson
wrote:
> I am seeing in some folks Active Directory environments where specifying
> a domain controller with the net ads join command fails. It will work
> when not specifying a domain controller. For instance:
> 
> net -k ads join FOO.COM -S DC.FOO.COM  # fails
> 
> net -k ads join FOO.COM # works
> 
> The fail message is:
> 
> Failed to join domain: failed to lookup DC info for domain
'FOO.COM' over rpc: Logon failure
> 
> When successful, the same domain controller that fails when specified,
> is actually the domain controller that is picked by the net ads join!
> 
> Any ideas here? I'm stumped.
Hi John,

Can you get a debug level 10 log + wireshark trace of the
failing command, and the same for the successful command
so we can compare ?

Also - *exact* version of Samba you're using please !

Thanks,

	Jeremy.