samba - Feb 2018 - Different ways/commands to join an AD domain

Hi List

I'm a bit puzzled about the different ways to join a W2012R2 D domain, as
there are multiple ways of doing that, and I'm not sure which is the right
or best one.

Background: we have different OS (Centos 5/6, Debian 8/9) which are or will be
integraded into the AD.

using "realm join ubxad.u-blox.net" (Debian 8/9)

i could join the domain but got 

[2018/02/08 17:23:01.852721,  3] ../source3/lib/access.c:338(allow_access)
  Allowed connection from 10.64.253.39 (10.64.253.39)
[2018/02/08 17:23:16.487274,  3] ../source3/lib/util_procid.c:54(pid_to_procid)
  pid_to_procid: messaging_dgm_get_unique failed: No such file or directory

resulting in: only accessible from the joined domain, not from our legacy samba3
domain.

After using "net ads join -U administrator" things started to work
right. (centos 7, Debian 8/9)

And there is also "adcli join" (centos 6)

Could you tell we when to use what program please? Also in terms of when to use
sssd or winbind instead?

Thank you.

Tom

On Fri, 9 Feb 2018 08:17:32 +0000
Tom Stocker via samba <samba at lists.samba.org> wrote:
> Hi List
> 
> I'm a bit puzzled about the different ways to join a W2012R2 D
> domain, as there are multiple ways of doing that, and I'm not sure
> which is the right or best one.
> 
> Background: we have different OS (Centos 5/6, Debian 8/9) which are
> or will be integraded into the AD.
> 
> using "realm join ubxad.u-blox.net" (Debian 8/9)
> 
> i could join the domain but got 
> 
> [2018/02/08 17:23:01.852721,
> 3] ../source3/lib/access.c:338(allow_access) Allowed connection from
> 10.64.253.39 (10.64.253.39) [2018/02/08 17:23:16.487274,
> 3] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid:
> messaging_dgm_get_unique failed: No such file or directory
> 
> resulting in: only accessible from the joined domain, not from our
> legacy samba3 domain.
> 
> After using "net ads join -U administrator" things started to
work
> right. (centos 7, Debian 8/9)
> 
> And there is also "adcli join" (centos 6)
> 
> Could you tell we when to use what program please? Also in terms of
> when to use sssd or winbind instead?
> 
> Thank you.
> 
> Tom
> 
The Samba supported way of joining a Linux client to a domain is 'net
ads join'.
The others are red-hat ways of joining a domain and are not supported
by Samba.

Samba supports the use of 'winbind' because it is a Samba product, sssd
is another red-hat product and is not supported by Samba.

If you want help with Samba, this is the place to ask, for others see
the relevant mailing list, the 'sssd-mailing' list for instance.

Rowland