samba - Feb 2016 - Error net ads join

Hi, something is wrong with my setup in my test server

net ads join -S centosvm -U administrator
Enter administrator's password:
Failed to join domain: failed to lookup DC info for domain 'PDC.CENTOS'
over rpc: Logon failure

Any help plz.

On 17/02/16 21:50, Oscar wrote:
> Hi, something is wrong with my setup in my test server
>
> net ads join -S centosvm -U administrator
> Enter administrator's password:
> Failed to join domain: failed to lookup DC info for domain
'PDC.CENTOS' over rpc: Logon failure
>
> Any help plz.
>
This looks like a dns error, you shouldn't have to specify the server 
with '-S'

Rowland

On 18/02/16 00:43, Oscar wrote:
> I have noticed this:
>
> reset smb.conf provisioning again, if i use "net rpc testjoin"
command
> returns ok, how i can activate "ads" to net ads command works?
>
> Thanks
>
You don't, in the smb.conf you posted was this line:

server role = active directory domain controller

It would appear that you have provisioned as a DC, you do not join the 
machine to itself.

I would remove the lines that authconfig added, if they are still there.

Rowland

Hi all.

I have freshly created samba ad server in centos 7 from sernet packages.

All goes smooth, exceptly running this command (it's the same hole that i 
find configuring samba in debian)

chgrp "Domain Admins" /usuarios
chgrp: grupo inválido: «Domain Admins»

also "getent group Domain\ Admins" don't return nothing.

I have changed /etc/nsswitch.conf

passwd:     files sss winbind
group:      files sss winbind

but still no luck, what i need to do please?

Thanks.



-----Mensaje original----- 
From: Rowland penny
Sent: Thursday, February 18, 2016 9:36 AM
To: sambalist
Subject: Re: [Samba] Error net ads join

On 18/02/16 00:43, Oscar wrote:
> I have noticed this:
>
> reset smb.conf provisioning again, if i use "net rpc testjoin"
command
> returns ok, how i can activate "ads" to net ads command works?
>
> Thanks
>
You don't, in the smb.conf you posted was this line:

server role = active directory domain controller

It would appear that you have provisioned as a DC, you do not join the
machine to itself.

I would remove the lines that authconfig added, if they are still there.

Rowland


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba