Informatico Neurodesarrollo
2017-Feb-27 13:16 UTC
[Samba] Samba4 fail linux machine join to ADS
Helo friends: This is my smb.conf file, runing in openSUSE 42.1 system and SAMBA acts as a DNS proxy to Bind # Global parameters [global] netbios name = SERVERDOM realm = POLRMVAR.MTZ.SLD.CU workgroup = POLRMVAR dns forwarder = 10.44.0.5 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc ldap server require strong auth = no idmap_ldb:use rfc2307 = yes ... And the client's linux machine (Linux Mint 18.1)configuration I try to join: [global] security = ADS workgroup = POLRMVAR realm = POLRMVAR.MTZ.SLD.CU netbios name = el nombre de tu PC en MAYÚSCULA add user script = /usr/sbin/adduser --quiet --disabled-password --gecos log file = /var/log/samba/%m.log log level = 1 # Default idmap config used for BUILTIN and local accounts/groups idmap config *:backend = tdb idmap config *:range = 2000-9999 # Idmap config for domain POLRMVAR idmap config POLRMVAR:backend = ad idmap config POLRMVAR:schema_mode = rfc2307 idmap config POLRMVAR:range = 10000-99999 # Winbind winbind separator = + winbind enum users = yes winbind enum groups = yes winbind cache time = 10 auth methods = winbind winbind use default domain = true winbind offline logon = false # Use template settings for login shell and home directory winbind nss info = template template shell = /sbin/nologin template homedir = /home/usuarios/%U Kerberos and NTP on the side of client's machine work fine When I try to join to ADS: #net ads join -U Administrator Enter Administrator's password: ldb: unable to stat module /usr/lib/x86_64-linux-gnu/samba/ldb : No such file or directory [I don't know if is side of server or th linux's client machine and,Why?] Using short domain name -- POLRMVAR Joined 'INFORMATICA2' to dns domain 'polrmvar.mtz.sld.cu' [the machine has already joined to ADS Domaind ?????] DNS Update for informática2.polrmvar.mtz.sld.cu failed: ERROR_DNS_INVALID_NAME [I was checked the sintaxis in named config file but informatica2 DNS update failed: NT_STATUS_UNSUCCESSFUL don't have acent] T.I.A. -- Jesús Reyes Piedra Admin Red Neurodearrollo,Cárdenas La caja decía:"Requiere windows 95 o superior"... Entonces instalé LINUX. -- Este mensaje le ha llegado mediante el servicio de correo electronico que ofrece Infomed para respaldar el cumplimiento de las misiones del Sistema Nacional de Salud. La persona que envia este correo asume el compromiso de usar el servicio a tales fines y cumplir con las regulaciones establecidas Infomed: http://www.sld.cu/
On Mon, 27 Feb 2017 08:16:46 -0500 Informatico Neurodesarrollo via samba <samba at lists.samba.org> wrote:> Helo friends: > This is my smb.conf file, runing in openSUSE 42.1 system and SAMBA > acts as a DNS proxy to BindWell stop it being a proxy, the DC should be authoritative for the domain.> > # Global parameters > [global] > netbios name = SERVERDOM > realm = POLRMVAR.MTZ.SLD.CU > workgroup = POLRMVAR > dns forwarder = 10.44.0.5 > server role = active directory domain controller > server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, > drepl, winbindd, ntp_signd, kccWhat happened to 'dnsupdate' and 'dns' ? Is a dns server running on the DC ?> ldap server require strong auth = no > idmap_ldb:use rfc2307 = yes > ... > > > And the client's linux machine (Linux Mint 18.1)configuration I try > to join: > > [global] > security = ADS > workgroup = POLRMVAR > realm = POLRMVAR.MTZ.SLD.CU > netbios name = el nombre de tu PC en MAYÚSCULAYour netbios name is way too long and it doesn't seem to be the clients short hostname.> add user script = /usr/sbin/adduser --quiet > --disabled-password --gecosSorry, this isn't goping to work.> > #net ads join -U Administrator > Enter Administrator's password: > ldb: unable to stat module /usr/lib/x86_64-linux-gnu/samba/ldb : No > such file or directoryHave you installed all the samba packages ? Rowland
Informatico Neurodesarrollo
2017-Feb-27 17:05 UTC
[Samba] Samba4 fail linux machine join to ADS
El 27/02/17 a las 10:53, Rowland Penny via samba escribió:> On Mon, 27 Feb 2017 08:16:46 -0500 > Informatico Neurodesarrollo via samba <samba at lists.samba.org> wrote: > >> Helo friends: >> This is my smb.conf file, runing in openSUSE 42.1 system and SAMBA >> acts as a DNS proxy to Bind > Well stop it being a proxy, the DC should be authoritative for the > domain. > >> # Global parameters >> [global] >> netbios name = SERVERDOM >> realm = POLRMVAR.MTZ.SLD.CU >> workgroup = POLRMVAR >> dns forwarder = 10.44.0.5 >> server role = active directory domain controller >> server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, >> drepl, winbindd, ntp_signd, kcc > What happened to 'dnsupdate' and 'dns' ? > Is a dns server running on the DC ?Yes, bind9 dns forwarder = 10.44.0.5 In the same PC> >> ldap server require strong auth = no >> idmap_ldb:use rfc2307 = yes >> ... >> >> >> And the client's linux machine (Linux Mint 18.1)configuration I try >> to join: >> >> [global] >> security = ADS >> workgroup = POLRMVAR >> realm = POLRMVAR.MTZ.SLD.CU >> netbios name = el nombre de tu PC en MAYÚSCULA > Your netbios name is way too long and it doesn't seem to be the clients > short hostname.Sorry Rowland, the netbios is : netbios name = informatica2 I was chat with friend that I try to help and forgot chance "el nombre de tu PC en MAYÚSCULA" with the valid name.> >> add user script = /usr/sbin/adduser --quiet >> --disabled-password --gecos > Sorry, this isn't goping to work.I will delete> >> #net ads join -U Administrator >> Enter Administrator's password: >> ldb: unable to stat module /usr/lib/x86_64-linux-gnu/samba/ldb : No >> such file or directory > Have you installed all the samba packages ?I installed from source Samba4 4.4.6 without problem.> > Rowland > > >T.I.A -- Jesús Reyes Piedra Admin Red Neurodearrollo,Cárdenas La caja decía:"Requiere windows 95 o superior"... Entonces instalé LINUX. -- Este mensaje le ha llegado mediante el servicio de correo electronico que ofrece Infomed para respaldar el cumplimiento de las misiones del Sistema Nacional de Salud. La persona que envia este correo asume el compromiso de usar el servicio a tales fines y cumplir con las regulaciones establecidas Infomed: http://www.sld.cu/