samba - Jun 2018 - error message during attempting to join the domain of the samba server

hello

when i prepare the samba 4.7 server i make the samba-tool domain provision
i add the domain and host to /etc/hosts file

but when i run the server and i attempt to join from windows 7 machine i
get :

the following error occurred attempting to join the domain "nsarnet"
the specified server cannot perform the requested operation

am i doing something wrong?

thank you

On Sun, 3 Jun 2018 18:30:12 +0300
nikos sarantopoulos via samba <samba at lists.samba.org> wrote:
> hello
> 
> when i prepare the samba 4.7 server i make the samba-tool domain
> provision i add the domain and host to /etc/hosts file
> 
> but when i run the server and i attempt to join from windows 7
> machine i get :
> 
> the following error occurred attempting to join the domain
"nsarnet"
> the specified server cannot perform the requested operation
> 
> am i doing something wrong?
> 
> thank you
Can you post the following files from your Samba DC:

/etc/hostname
/etc/hosts
/etc/resolv.conf
/etc/krb5.conf
smb.conf
the IP of the DC

Rowland

On Sun, 3 Jun 2018 18:53:14 +0300
nikos sarantopoulos <nsarantopoulos68 at gmail.com> wrote:
> i am using centos 6.8
> there is no /etc/hostname
Fair enough
> 
> /etc/hosts:
> 
> 
> 127.0.0.1   localhost localhost.localdomain localhost4
> localhost4.localdomain4
> ::1         localhost localhost.localdomain localhost6
> localhost6.localdomain6
> 192.168.1.2 server.nsarnet.gr server
> 
> /etc/resolv.conf:
> 
> # Generated by NetworkManager
> search nsarnet.gr
> nameserver 192.168.1.2
> 
> /etc/krb5.conf:
> 
You only need this part:
> [libdefaults]
>         default_realm = NSARNET.GR
>         dns_lookup_realm = false
>         dns_lookup_kdc = true
> 
> /usr/local/samba/etc/smb.conf:
> 
> [global]
>         netbios name = SERVER
>         realm = NSARNET.GR
>         workgroup = NSARNET
>         dns forwarder = 192.168.1.2
You cannot use the DC itself for its own forwarder, try your routers
IP, or another dns server you may have, failing that use something like
Googles NS 8.8.8.8
>         server role = active directory domain controller
>         idmap_ldb:use rfc2307 = yes
>         interfaces = eth1 lo
>         bind interfaces only = yes
> 
> 
> [netlogon]
>         path = /usr/local/samba/var/locks/sysvol/nsarnet.gr/scripts
>         read only = No
> 
> [sysvol]
>         path = /usr/local/samba/var/locks/sysvol
>         read only = No
> 
> [test]
>         path = /test
>         read only = no
> 
> my ip is 192.168.1.2 of the server with interface eth1
> 
Is Selinux running, if it is try disabling it
Is another dns server, such as dnsmasq, running ? if so, turn it off.

Rowland