samba - Mar 2016 - Problem joining an AD

Hi list!

I have a very strange problem...

I configured Samba 4.1.6 on a Ubuntu 14.04 Server to act as AD-Controller.
It works without any problem.

Then I wanted to join the AD two other Servers with Ubuntu 14.04 and Samba
4.1.6.
The first works without any problem, the second (same configuration!) not...

Here my smb.conf:

# Global parameters
[global]
        workgroup = CCH
        realm = CCH.INTRA
        netbios name = MAIN
        server role = MEMBER SERVER
        server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind,
ntp_signd, kcc, smb
        dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon,
lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey,
winreg, srvsvc

        template shell = /bin/bash
        template homedir = /home/%ACCOUNTNAME%

[transfer]
        comment = Public Stuff
        path = /home/transfer
        public = yes
        writable = yes
        browseable = yes

I configured NSS and PAM to authenticate agains Samba and it works!
But if I try to connect to samba using smbclient I always get:

	session setup failed: NT_STATUS_ACCESS_DENIED

Could someone suggest me what can I do to resolve the problem?

Thanks a lot!
Luca Bertoncello
(lucabert at lucabert.de)

On 26/03/16 12:13, Luca Bertoncello wrote:
> Hi list!
>
> I have a very strange problem...
>
> I configured Samba 4.1.6 on a Ubuntu 14.04 Server to act as AD-Controller.
> It works without any problem.
>
> Then I wanted to join the AD two other Servers with Ubuntu 14.04 and Samba
> 4.1.6.
> The first works without any problem, the second (same configuration!)
not...
>
> Here my smb.conf:
>
> # Global parameters
> [global]
>          workgroup = CCH
>          realm = CCH.INTRA
>          netbios name = MAIN
>          server role = MEMBER SERVER
>          server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl,
winbind, ntp_signd, kcc, smb
>          dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr,
netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6,
backupkey, winreg, srvsvc
>
>          template shell = /bin/bash
>          template homedir = /home/%ACCOUNTNAME%
>
> [transfer]
>          comment = Public Stuff
>          path = /home/transfer
>          public = yes
>          writable = yes
>          browseable = yes
>
> I configured NSS and PAM to authenticate agains Samba and it works!
> But if I try to connect to samba using smbclient I always get:
>
> 	session setup failed: NT_STATUS_ACCESS_DENIED
>
> Could someone suggest me what can I do to resolve the problem?
>
> Thanks a lot!
> Luca Bertoncello
> (lucabert at lucabert.de)
>
How did you join the machines to the DC, I think I know, but I want you 
to confirm it ?

Rowland

Rowland penny <rpenny at samba.org> schrieb:
> How did you join the machines to the DC, I think I know, but I want you 
> to confirm it ?
I used this command:

samba-tool domain join cch.intra DC --username=Administrator --use-ntvfs

As I sayd, on the other Server it works, on this not...
I'm puzzled...

Thanks
Luca Bertoncello
(lucabert at lucabert.de)