samba - Sep 2018 - samba4.8.x machine account authentication using NetJoinDomain failed

Maybe as you said I was lucky before. Then if I have a computer account in my
domain, how can I get this computer authencated in domain as I did before? Does
the NetJoinDomain work either? Because I just try to create a computer account
using RSAT, but use it to authencate with the domain by NetJoinDomain ,  which
failed.
Or how to offline domain join in samba4.9.0?

Ryan


>On Fri, 14 Sep 2018 20:01:41 +0800 (CST)
>Ryan <ryanyang51 at 163.com> wrote:
>
>> Actually 0904.huawei.com is just one of my test domain. I also built
>> domain naned vds.huawei.com.  Same problem exsts. Besides, samba
>> 4.5.16 doesn't have this issue. I still doubt that some setting
>> changed, such as encrypt method permission... After all, the log
>> renainds password is wrong.Do you have any other clue?
>> 
>> 
>
>As far as I am aware, this wasn't expected to work with 4.5.x, you were
>just lucky that it did. There have been numerous changes since then and
>it is highly likely one or more of these has altered Samba so that it
>doesn't work any more on the versions you have tried. Samba 4.9.0 has
>now been released with an enhanced version of 'samba-tool computer'
>which may do what you require.
>
>Rowland
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba

On Thu, 20 Sep 2018 16:36:06 +0800 (CST)
Ryan <ryanyang51 at 163.com> wrote:
> Maybe as you said I was lucky before. Then if I have a computer
> account in my domain, how can I get this computer authencated in
> domain as I did before? Does the NetJoinDomain work either? Because I
> just try to create a computer account using RSAT, but use it to
> authencate with the domain by NetJoinDomain ,  which failed. Or how
> to offline domain join in samba4.9.0?
> 
Just having a computer account in AD isn't sufficient, you must join
the computer to the domain.

As far as I can see, the only real reason for pre-creating a computer
account is to have the computer in a different OU from the default.

Rowland

Er, the computer is already in the domain. In fact, I firstly join the domain,
then I make this computer to be a template. Later I use the template to deploy a
computer again. This computer is the one I want to offline join the domain.

Ryan

>On Thu, 20 Sep 2018 16:36:06 +0800 (CST)
>Ryan <ryanyang51 at 163.com> wrote:
>
>> Maybe as you said I was lucky before. Then if I have a computer
>> account in my domain, how can I get this computer authencated in
>> domain as I did before? Does the NetJoinDomain work either? Because I
>> just try to create a computer account using RSAT, but use it to
>> authencate with the domain by NetJoinDomain ,  which failed. Or how
>> to offline domain join in samba4.9.0?
>> 
>
>Just having a computer account in AD isn't sufficient, you must join
>the computer to the domain.
>
>As far as I can see, the only real reason for pre-creating a computer
>account is to have the computer in a different OU from the default.
>
>Rowland
> 
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba