samba - Sep 2023 - Failed to join domain: failed to find DC for domain...

[Sat Sep 09 15:09:09] [root at D01~/.bin$]net ads join -U administrator
Password for [HOME\administrator]:
get_kdc_ip_string: get_kdc_list (site-less) fail NT_STATUS_NO_LOGON_SERVERS
kerberos_kinit_password administrator at HOME.ROB-CAMPBELL.LAN failed: Cannot
contact any KDC for requested realm
kerberos_kinit_password D01$@HOME.ROB-CAMPBELL.LAN failed: Cannot contact
any KDC for requested realm
Using short domain name -- HOME
Joined 'D01' to dns domain 'home.rob-campbell.lan'
kerberos_kinit_password D01$@HOME.ROB-CAMPBELL.LAN failed: Cannot contact
any KDC for requested realm
DNS update failed: kinit failed: Cannot contact any KDC for requested realm

So something is being blocked but I'm not sure what because I opened the
suggested ports.  Still can't contact any KDC.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In all things, Be Intentional.


On Sat, Sep 9, 2023 at 2:36?PM Rowland Penny via samba <
samba at lists.samba.org> wrote:
> On Sat, 9 Sep 2023 14:01:34 -0400
> Rob Campbell via samba <samba at lists.samba.org> wrote:
>
> > > Why can it not find a DC ? Is there a firewall or similar running
?
> > >
> >
> > I have opened the firewall on the DC. Which ports do I need to open
> > on the DM?  Apparently I have nothing opened on the DM but I opened
> > the required ports according to
> > https://wiki.samba.org/index.php/Samba_Domain_Member_Port_Usage.
> >
> > [Sat Sep 09 13:56:22] [root at D01~/.bin$]./check_smb.sh
> >  148779 pts/1    S+     0:00 /bin/bash ./check_smb.sh
> >  148781 pts/1    S+     0:00 grep -E samba|smb|nmb|winbind
> > [Sat Sep 09 13:56:37] [root at D01~/.bin$]net ads join -U
administrator
> > Password for [HOME\administrator]:
> > Failed to join domain: failed to find DC for domain HOME - The object
> > was not found.
> >
>
> The easiest way to check if it is the firewall, turn it off, on both
> the DC and the Unix domain member.
>
> Rowland
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On Sat, 9 Sep 2023 15:11:20 -0400
Rob Campbell via samba <samba at lists.samba.org> wrote:
> [Sat Sep 09 15:09:09] [root at D01~/.bin$]net ads join -U administrator
> Password for [HOME\administrator]:
> get_kdc_ip_string: get_kdc_list (site-less) fail
> NT_STATUS_NO_LOGON_SERVERS kerberos_kinit_password
> administrator at HOME.ROB-CAMPBELL.LAN failed: Cannot contact any KDC
> for requested realm kerberos_kinit_password
> D01$@HOME.ROB-CAMPBELL.LAN failed: Cannot contact any KDC for
> requested realm Using short domain name -- HOME
> Joined 'D01' to dns domain 'home.rob-campbell.lan'
> kerberos_kinit_password D01$@HOME.ROB-CAMPBELL.LAN failed: Cannot
> contact any KDC for requested realm
> DNS update failed: kinit failed: Cannot contact any KDC for requested
> realm
> 
> So something is being blocked but I'm not sure what because I opened
> the suggested ports.  Still can't contact any KDC.
> 
>
Did you turn off the Firewall ?

It looks like something is getting in the way, either that or something
is set up incorrectly.

I know you said that you are using Debian, but what version and what
version of Samba ?
Are you using Bind9 on the DC or the internal dns server ?

Rowland