And why are you against Samba AD DC?
I do not have a user "Administrator"
I RUN: samba-tool domain join EXAMPLE DC -Uvas.lah --password=password
--realm=EXAMPLE.RU --site=SITE2 -d 2
lpcfg_load: refreshing parameters from /etc/samba/smb.conf
Finding a writeable DC for domain 'EXAMPLE'
Found DC srv-site3-dc01.example.ru
workgroup is EXAMPLE
realm is example.ru
Adding CN=SRV-SITE2-DC01,OU=Domain Controllers,DC=example,DC=ru
Adding
CN=SRV-SITE2-DC01,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru
Adding CN=NTDS
Settings,CN=SRV-SITE2-DC01,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru
Join failed - cleaning up
Could not find machine account in secrets database: Failed to fetch machine
account password for EXAMPLE from both secrets.ldb (Could not find entry to
match
filter: '(&(fl
atname=EXAMPLE)(objectclass=primaryDomain))' base: 'cn=Primary
Domains': No such object: dsdb_search at ../source4/dsdb/common/util.c:4636)
and from
/var/lib/samba/private/
secrets.tdb: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Deleted CN=SRV-SITE2-DC01,OU=Domain Controllers,DC=example,DC=ru
Deleted CN=NTDS
Settings,CN=SRV-SITE2-DC01,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru
Deleted
CN=SRV-SITE2-DC01,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru
ERROR(ldb): uncaught exception - LDAP error 10 LDAP_REFERRAL - <0000202B:
RefErr: DSID-030A0B09, data 0, 1 access points
ref 1:
'7bbe1649-5261-430c-b473-9b85a36719b5._msdcs.example.ru'> <ldap://7bbe1649-5261-430c-b473-9b85a36719b5._msdcs.example.ru>
File "/usr/lib64/python2.7/site-packages/samba/netcmd/__init__.py",
line 176, in _run
return self.run(*args, **kwargs)
File "/usr/lib64/python2.7/site-packages/samba/netcmd/domain.py",
line 661, in run
machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1474,
in join_DC
ctx.do_join()
File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1375,
in do_join
ctx.join_add_objects()
File "/usr/lib64/python2.7/site-packages/samba/join.py", line 668,
in join_add_objects
ctx.samdb.modify(m)
samba-tool domain join EXAMPLE DC --realm=EXAMPLE.RU -Uvas.lah
--server=srv-dc01.example.ru --password=password --site=SITE2 -d 2
......
Partition[DC=ForestDnsZones,DC=example,DC=ru] objects[1163/2778]
linked_values[0/0]
Replicated 388 objects (0 linked attributes) for
DC=ForestDnsZones,DC=example,DC=ru
Partition[DC=ForestDnsZones,DC=example,DC=ru] objects[1565/2778]
linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
DC=ForestDnsZones,DC=example,DC=ru
Partition[DC=ForestDnsZones,DC=example,DC=ru] objects[1967/2778]
linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
DC=ForestDnsZones,DC=example,DC=ru
Partition[DC=ForestDnsZones,DC=example,DC=ru] objects[2369/2778]
linked_values[0/0]
Replicated 402 objects (0 linked attributes) for
DC=ForestDnsZones,DC=example,DC=ru
Partition[DC=ForestDnsZones,DC=example,DC=ru] objects[2535/2778]
linked_values[0/0]
Replicated 166 objects (0 linked attributes) for
DC=ForestDnsZones,DC=example,DC=ru
Exop on[CN=RID Manager$,CN=System,DC=example,DC=ru] objects[3] linked_values[0]
Replicated 3 objects (0 linked attributes) for DC=example,DC=ru
Committing SAM database
Adding 1 remote DNS records for SRV-SITE2-DC01.example.ru
Adding DNS A record SRV-SITE2-DC01.example.ru for IPv4 IP: 10.2.1.15
Join failed - cleaning up
Could not find machine account in secrets database: Failed to fetch machine
account password for EXAMPLE from both secrets.ldb (Could not find entry to
match
filter: '(&(fl
atname=EXAMPLE)(objectclass=primaryDomain))' base: 'cn=Primary
Domains': No such object: dsdb_search at ../source4/dsdb/common/util.c:4636)
and from
/var/lib/samba/private/
secrets.tdb: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Deleted CN=RID Set,CN=SRV-SITE2-DC01,OU=Domain Controllers,DC=example,DC=ru
Deleted CN=SRV-SITE2-DC01,OU=Domain Controllers,DC=example,DC=ru
Deleted CN=NTDS
Settings,CN=SRV-SITE2-DC01,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru
Deleted
CN=SRV-SITE2-DC01,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru
ERROR(runtime): uncaught exception - (9003,
'WERR_DNS_ERROR_RCODE_NAME_ERROR')
File "/usr/lib64/python2.7/site-packages/samba/netcmd/__init__.py",
line 176, in _run
return self.run(*args, **kwargs)
File "/usr/lib64/python2.7/site-packages/samba/netcmd/domain.py",
line 661, in run
machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1474,
in join_DC
ctx.do_join()
File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1384,
in do_join
ctx.join_add_dns_records()
File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1116,
in join_add_dns_records
dns_partition=domaindns_zone_dn)
File "/usr/lib64/python2.7/site-packages/samba/samdb.py", line 939,
in dns_lookup
dns_partition=dns_partition)
В Ср, 21/02/2018 в 08:59 +0000, Rowland Penny via samba
пишет:> On Wed, 21 Feb 2018 10:45:43 +0500
> "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote:
>
> > Not join
> > samba-tool domain join EXAMPLE DC -Uvas.lah --password=password
> > --realm=EXAMPLE.RU --site=SITE2 find srv-site3-dc01 and the same
> > error occurred
> >
> > samba-tool domain join EXAMPLE DC -UAdministrator --password=password
> > --server=srv-dc01.example.ru --realm=EXAMPLE.RU --site=SITE2 returned
> > the original error
> >
> >
> > vas.lah - domain administrator
> > also tried the user with the rights: enterprice admins and scheme
> > admins
> >
> > Samba 4.6 previously tried and joined the domain, but due to
> > replication errors it was abandoned
> >
> >
>
> Is there some reason why you will not try the exact join command I
> posted ???
>
> I can assure you that the join command works on 4.7.5, I did it last
> Friday, albeit against a Samba AD DC.
>
> You shouldn't get replication errors, perhaps the problem lies on the
> windows DC you are trying to join to ?
>
> Rowland
>
>