samba - Jan 2019 - Samba 4.9, RSAT, Windows 10 - "Cannot Manage the operating System..."

I'm trying to get an Samba AD setup.  I thought I had RSAT working, but
when I launch the server manager I get the error message:

"Error - Cannot manage the operating system of the target computer"

I can ping the computer and the internal DNS seems to be working.
I can manually create shares & I can browse netlogon and sysvol
of the AD server.

Am I missing something or is this expected behavior?

Thanks

marco

On Fri, 28 Dec 2018 10:27:32 -0500
Marco Shmerykowsky via samba <samba at lists.samba.org> wrote:
> I'm trying to get an Samba AD setup.  I thought I had RSAT working,
> but when I launch the server manager I get the error message:
> 
> "Error - Cannot manage the operating system of the target
computer"
> 
> I can ping the computer and the internal DNS seems to be working.
> I can manually create shares & I can browse netlogon and sysvol
> of the AD server.
> 
> Am I missing something or is this expected behavior?
> 
> Thanks
> 
> marco
> 
> 
What exactly are you trying to do ?
Who is the user you are trying to do it with ?

Rowland

On Fri, 28 Dec 2018 10:45:14 -0500
Marco Shmerykowsky <marco at sce-engineers.com> wrote:
> 
> 
> On 2018-12-28 10:37 am, Rowland Penny via samba wrote:
> > On Fri, 28 Dec 2018 10:27:32 -0500
> > Marco Shmerykowsky via samba <samba at lists.samba.org> wrote:
> > 
> >> I'm trying to get an Samba AD setup.  I thought I had RSAT
working,
> >> but when I launch the server manager I get the error message:
> >> 
> >> "Error - Cannot manage the operating system of the target
computer"
> >> 
> >> I can ping the computer and the internal DNS seems to be working.
> >> I can manually create shares & I can browse netlogon and
sysvol
> >> of the AD server.
> >> 
> >> Am I missing something or is this expected behavior?
> >> 
> >> Thanks
> >> 
> >> marco
> >> 
> >> 
> > 
> > What exactly are you trying to do ?
> > Who is the user you are trying to do it with ?
> > 
> > Rowland
> 
> I'm trying to get group policies to map drives (separate email thread 
> question).
I sort of thought this was the case, after reading your second post, but
WHO are you running as on the Windows PC running 'server manager' ?
> 
> The various tools/snapins seem to work, however, the dashboard on the
> Server Manager is showing "Red" for "manageability" of
my server.
> 
> Not sure if this is expected behavior.
> 
> I do see an error message about the RPC server being unavailable.
This is very common and can be ignored.

Rowland

On Fri, 28 Dec 2018 11:22:09 -0500
Marco Shmerykowsky PE <marco at sce-engineers.com> wrote:
> On 12/28/2018 11:11 AM, Rowland Penny via samba wrote:
> > On Fri, 28 Dec 2018 10:45:14 -0500
> > Marco Shmerykowsky <marco at sce-engineers.com> wrote:
> > 
> >>
> >>
> >> On 2018-12-28 10:37 am, Rowland Penny via samba wrote:
> >>> On Fri, 28 Dec 2018 10:27:32 -0500
> >>> Marco Shmerykowsky via samba <samba at lists.samba.org>
wrote:
> >>>
> >>>> I'm trying to get an Samba AD setup.  I thought I had
RSAT
> >>>> working, but when I launch the server manager I get the
error
> >>>> message:
> >>>>
> >>>> "Error - Cannot manage the operating system of the
target
> >>>> computer"
> >>>>
> >>>> I can ping the computer and the internal DNS seems to be
working.
> >>>> I can manually create shares & I can browse netlogon
and sysvol
> >>>> of the AD server.
> >>>>
> >>>> Am I missing something or is this expected behavior?
> >>>>
> >>>> Thanks
> >>>>
> >>>> marco
> >>>>
> >>>>
> >>>
> >>> What exactly are you trying to do ?
> >>> Who is the user you are trying to do it with ?
> >>>
> >>> Rowland
> >>
> >> I'm trying to get group policies to map drives (separate email
> >> thread question).
> > 
> > I sort of thought this was the case, after reading your second
> > post, but WHO are you running as on the Windows PC running 'server
> > manager' ?
> 
> The who:  "Administrator" as defined by the basic AD setup
Then it should work, unless you have done something strange, such as
giving 'Administrator' a uidNumber attribute.

Can you post the contents of the following files:

/etc/hostname
/etc/hosts
/etc/resolv.conf
/etc/krb5.conf
/etc/nsswitch.conf
smb.conf

Is a firewall or selinux running ?

Rowland

On Wed, 2 Jan 2019 10:43:32 -0500
Marco Shmerykowsky PE <marco at sce-engineers.com> wrote:
> > /etc/hostname
> 
> machine123
> 
> > /etc/hosts
> 
> 127.0.0.1       localhost 
> 127.0.1.1       machine123.company-internal.company.com   machine123
The '127.0.1.1' should be the ipaddress of 'machine123'
> > /etc/resolv.conf
> # Generated by NetworkManager 
> nameserver 192.168.0.251
I take '192.168.0.251' is the ipaddress of 'machine123'
There should also be the line 'search company-internal.com'
> > /etc/nsswitch.conf
> 
> # /etc/nsswitch.conf 
> # 
> # Example configuration of GNU Name Service Switch functionality. 
> # If you have the `glibc-doc-reference' and `info' packages
> installed, try:
> # `info libc "Name Service Switch"' for information about
this file.
> 
> passwd:         compat winbind 
> group:          compat winbind 
> shadow:         compat windind 
Remove 'winbind' from the 'shadow' line, it cases problems and
isn't
required.
> gshadow:        files 
> hosts:          files mdns4_minimal [NOTFOUND=return] dns myhostname 
try 'hosts files dns'
 
> > Is a firewall or selinux running ?
> 
> Iptables seems to be running.  Selinux is not
Check if all the required ports are open, see here:

https://wiki.samba.org/index.php/Samba_AD_DC_Port_Usage

Rowland

On 1/2/2019 11:59 AM, Rowland Penny via samba wrote:
> On Wed, 2 Jan 2019 10:43:32 -0500
> Marco Shmerykowsky PE <marco at sce-engineers.com> wrote:
> 
>>> /etc/hostname
>>
>> machine123
>>
>>> /etc/hosts
>>
>> 127.0.0.1       localhost
>> 127.0.1.1       machine123.company-internal.company.com   machine123
> 
> The '127.0.1.1' should be the ipaddress of 'machine123'
> 
>>> /etc/resolv.conf
>> # Generated by NetworkManager
>> nameserver 192.168.0.251
> 
> I take '192.168.0.251' is the ipaddress of 'machine123'
> There should also be the line 'search company-internal.com'
> 
>>> /etc/nsswitch.conf
>>
>> # /etc/nsswitch.conf
>> #
>> # Example configuration of GNU Name Service Switch functionality.
>> # If you have the `glibc-doc-reference' and `info' packages
>> installed, try:
>> # `info libc "Name Service Switch"' for information about
this file.
>>
>> passwd:         compat winbind
>> group:          compat winbind
>> shadow:         compat windind
> 
> Remove 'winbind' from the 'shadow' line, it cases problems
and isn't
> required.
> 
>> gshadow:        files
>> hosts:          files mdns4_minimal [NOTFOUND=return] dns myhostname
> 
> try 'hosts files dns'
>   
>>> Is a firewall or selinux running ?
>>
>> Iptables seems to be running.  Selinux is not
> 
> Check if all the required ports are open, see here:
> 
> https://wiki.samba.org/index.php/Samba_AD_DC_Port_Usage
Made the corrections.  All the ports listed on the wiki seem
to be listening.  No change in behavior.

Same message on RSAT and drive maps list "access denied"