samba - May 2015 - Trouble Connecting Windows 8.1 RSAT to Samba Domain

Marc,

Sounds like a great presentation and I wish I could attend.
The steps are:

1.  Downloaded and installed the RSAT for Windows 8.1 X64.

2.  Log into Windows 8.1 client with Domain Administrator account.

3.  Execute Server Manager.

4.  From Server Manager Dashboard, I choose "Manage" from the top
menu, and
then Add Servers.

5.  The Add Servers screen shows up with the Active Directory Tab
highlighted.  It already shows the samba server domain name.  Example:  if
full domain name is internal.example.com, what shows in the Location: field
is "internal".

6.  I fill in the CN:  a10 and click Find Now.  The Samba server machine
name shows up in the field below.  I highlight it and then click the
">"
button to make it show up in the "Selected" field to the right.  Then
click
OK.

7.  I'm then back at the All Servers page and I click the Refresh option
under Tasks drop-down menu.  The refresh fails and produces a red flag
icon.  The error details state:

a10:  Refresh failed with the following error:  The RPC Server is
unavailable.
a10:  Configuration refresh failed with the following error:  The metadata
failed to be retrieved from the server, due to the following error:  WinRM
cannot complete the operation.  Verify that the specified computer name is
valid, that the computer is accessible over the network, and that a
firewall exception for the WinRM service is enabled and allows access from
this computer.  By default, the WinRM firewall exception for public
profiles limits access to remote computers within the same local subnet.

The windows client is on the same local subnet.
The windows client can authenticate to the samba server using the domain
User account and/or the Administrator account.
All necessary ports are open on the samba server.
The computer name is correct and hostname -f reports
a10.internal.example.com.

I appreciate your help.  Please let me know if there's anything else I can
provide.
Best regards,
Mike

On Mon, May 4, 2015 at 2:14 PM, Marc Muehlfeld <mmuehlfeld at samba.org>
wrote:
> Hello Mike,
>
> Am 04.05.2015 um 15:50 schrieb Mike:
> > I saw the following thread in the samba list archives but no solution:
> >
> > http://marc.info/?l=samba&m=141214808508452&w=2
> >
> > Host OS:  CentOS ver 7.1503
> > Samba:  Version 4.1.17-SerNet-RedHat-11.el7
> > Samba4 is running with internal DNS.
> > I'm able to add a domain user with samba-tool and connect Win 8.1
client
> to
> > the domain.
> >
> > When I run Microsoft Server Manager and try to "manage" the
server using
> > Administrator credentials, I receive the following error:
> >
> > "Target computer not accessible 5/4/2015."
> >
> > The Server Manager activity notification states, "The refresh
failed
> > because WinRM is not running and could not be started."
> >
> > I have performed ipconfig /all on the Win 8.1 client and Samba4 box is
> > listed in the "DNS Server" output.
>
> Can you give some step-by-step instructions, so I an try to reproduce it?
>
> I just installed the RSAT, opened ADUC, DNS, etc. or started mmc.exe and
> added the corresponding snap-ins.
>
>
>
>
>
> > Sidenote:  I'm curious how many Samba4 domain admins choose to use
the
> RSAT
> > tools; or, whether most prefer to use samba-tool to config and manage
the
> > domain users, groups, and services.
>
> This answer is part of my SambaXP presentation (http://www.sambaxp.org/)
> in two weeks. ;-)
>
> Slides, raw data and a full report of the user survey I will publish
> after the conference and announce here on the list, as well.
>
>
> Regards,
> Marc
>

Forgot to report:  WinRM Service is active as process ID 292 on the windows
client box.
Status "Running."


On Mon, May 4, 2015 at 3:15 PM, Mike <1100100 at gmail.com> wrote:
> Marc,
>
> Sounds like a great presentation and I wish I could attend.
> The steps are:
>
> 1.  Downloaded and installed the RSAT for Windows 8.1 X64.
>
> 2.  Log into Windows 8.1 client with Domain Administrator account.
>
> 3.  Execute Server Manager.
>
> 4.  From Server Manager Dashboard, I choose "Manage" from the top
menu,
> and then Add Servers.
>
> 5.  The Add Servers screen shows up with the Active Directory Tab
> highlighted.  It already shows the samba server domain name.  Example:  if
> full domain name is internal.example.com, what shows in the Location:
> field is "internal".
>
> 6.  I fill in the CN:  a10 and click Find Now.  The Samba server machine
> name shows up in the field below.  I highlight it and then click the
">"
> button to make it show up in the "Selected" field to the right. 
Then click
> OK.
>
> 7.  I'm then back at the All Servers page and I click the Refresh
option
> under Tasks drop-down menu.  The refresh fails and produces a red flag
> icon.  The error details state:
>
> a10:  Refresh failed with the following error:  The RPC Server is
> unavailable.
> a10:  Configuration refresh failed with the following error:  The metadata
> failed to be retrieved from the server, due to the following error:  WinRM
> cannot complete the operation.  Verify that the specified computer name is
> valid, that the computer is accessible over the network, and that a
> firewall exception for the WinRM service is enabled and allows access from
> this computer.  By default, the WinRM firewall exception for public
> profiles limits access to remote computers within the same local subnet.
>
> The windows client is on the same local subnet.
> The windows client can authenticate to the samba server using the domain
> User account and/or the Administrator account.
> All necessary ports are open on the samba server.
> The computer name is correct and hostname -f reports
> a10.internal.example.com.
>
> I appreciate your help.  Please let me know if there's anything else I
can
> provide.
> Best regards,
> Mike
>
> On Mon, May 4, 2015 at 2:14 PM, Marc Muehlfeld <mmuehlfeld at
samba.org>
> wrote:
>
>> Hello Mike,
>>
>> Am 04.05.2015 um 15:50 schrieb Mike:
>> > I saw the following thread in the samba list archives but no
solution:
>> >
>> > http://marc.info/?l=samba&m=141214808508452&w=2
>> >
>> > Host OS:  CentOS ver 7.1503
>> > Samba:  Version 4.1.17-SerNet-RedHat-11.el7
>> > Samba4 is running with internal DNS.
>> > I'm able to add a domain user with samba-tool and connect Win
8.1
>> client to
>> > the domain.
>> >
>> > When I run Microsoft Server Manager and try to "manage"
the server using
>> > Administrator credentials, I receive the following error:
>> >
>> > "Target computer not accessible 5/4/2015."
>> >
>> > The Server Manager activity notification states, "The refresh
failed
>> > because WinRM is not running and could not be started."
>> >
>> > I have performed ipconfig /all on the Win 8.1 client and Samba4
box is
>> > listed in the "DNS Server" output.
>>
>> Can you give some step-by-step instructions, so I an try to reproduce
it?
>>
>> I just installed the RSAT, opened ADUC, DNS, etc. or started mmc.exe
and
>> added the corresponding snap-ins.
>>
>>
>>
>>
>>
>> > Sidenote:  I'm curious how many Samba4 domain admins choose to
use the
>> RSAT
>> > tools; or, whether most prefer to use samba-tool to config and
manage
>> the
>> > domain users, groups, and services.
>>
>> This answer is part of my SambaXP presentation
(http://www.sambaxp.org/)
>> in two weeks. ;-)
>>
>> Slides, raw data and a full report of the user survey I will publish
>> after the conference and announce here on the list, as well.
>>
>>
>> Regards,
>> Marc
>>
>
>

Hello Mike,

Am 04.05.2015 um 21:15 schrieb Mike:
> 7.  I'm then back at the All Servers page and I click the Refresh
option
> under Tasks drop-down menu.  The refresh fails and produces a red flag
> icon.  The error details state:
Right. I can reproduce this.

I don't know how the Server Manager talks to the machines - if it's RPC 
or something else. You can file a bug report/feature request in 
bugzilla, to track this, if it's not already there. Please add your 
steps and a level 10 debug log.


However, you can run all required tools from outside directly and 
without the server manager:
- Open control panel
- Go to "administrative tools"
There you find ADUC (e. g. for user/group management), DNS, Sites & 
Services, Group Policy Management. This are the most common tools you 
require and most thinks work like expected.


Regards,
Marc

On Mon, May 4, 2015 at 3:54 PM, Marc Muehlfeld <mmuehlfeld at samba.org>
wrote:
> Hello Mike,
>
> Am 04.05.2015 um 21:15 schrieb Mike:
>
>> 7.  I'm then back at the All Servers page and I click the Refresh
option
>> under Tasks drop-down menu.  The refresh fails and produces a red flag
>> icon.  The error details state:
>>
>
> Right. I can reproduce this.
>
> I don't know how the Server Manager talks to the machines - if it's
RPC or
> something else. You can file a bug report/feature request in bugzilla, to
> track this, if it's not already there. Please add your steps and a
level 10
> debug log.
>
>
>
> However, you can run all required tools from outside directly and without
> the server manager:
> - Open control panel
> - Go to "administrative tools"
> There you find ADUC (e. g. for user/group management), DNS, Sites &
> Services, Group Policy Management. This are the most common tools you
> require and most thinks work like expected.
>
>
> Regards,
> Marc
>

1.  Well this is great news to me that you're able to reproduce the error:
it's nice to know every once in a while that one's lack of skill and
knowledge is not the issue.  <<grin>>

2.  GOLD!!  I have been scouring materials trying to figure out whether the
server manager is absolutely necessary to accomplish many of the items
found in the User Documentation on the Samba Wiki.  If I can accomplish all
the same configuration operations via Admin Tools, then all is well.

Thank you so much for you time and help.

Best,
Mike