Rowland Penny
2023-Sep-09 19:23 UTC
[Samba] Failed to join domain: failed to find DC for domain...
On Sat, 9 Sep 2023 15:11:20 -0400 Rob Campbell via samba <samba at lists.samba.org> wrote:> [Sat Sep 09 15:09:09] [root at D01~/.bin$]net ads join -U administrator > Password for [HOME\administrator]: > get_kdc_ip_string: get_kdc_list (site-less) fail > NT_STATUS_NO_LOGON_SERVERS kerberos_kinit_password > administrator at HOME.ROB-CAMPBELL.LAN failed: Cannot contact any KDC > for requested realm kerberos_kinit_password > D01$@HOME.ROB-CAMPBELL.LAN failed: Cannot contact any KDC for > requested realm Using short domain name -- HOME > Joined 'D01' to dns domain 'home.rob-campbell.lan' > kerberos_kinit_password D01$@HOME.ROB-CAMPBELL.LAN failed: Cannot > contact any KDC for requested realm > DNS update failed: kinit failed: Cannot contact any KDC for requested > realm > > So something is being blocked but I'm not sure what because I opened > the suggested ports. Still can't contact any KDC. > >Did you turn off the Firewall ? It looks like something is getting in the way, either that or something is set up incorrectly. I know you said that you are using Debian, but what version and what version of Samba ? Are you using Bind9 on the DC or the internal dns server ? Rowland
Rob Campbell
2023-Sep-09 19:40 UTC
[Samba] Failed to join domain: failed to find DC for domain...
Did you turn off the Firewall ?
- I did turn it off on both.
It looks like something is getting in the way, either that or something
is set up incorrectly.
I know you said that you are using Debian, but what version and what
version of Samba ?
- Debian 12. Samba = 4.17.10-Debian
Are you using Bind9 on the DC or the internal dns server ?
- I am using internal dns server but I did install bind9 however, I
disabled the service.
netstat -tulpn | grep :53
tcp 0 0 10.0.0.10:53 0.0.0.0:* LISTEN
1757540/samba: task
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN
1757540/samba: task
tcp6 0 0 2600:4040:4661:9a00::53 :::* LISTEN
1757540/samba: task
tcp6 0 0 2600:4040:4661:9a00::53 :::* LISTEN
1757540/samba: task
tcp6 0 0 ::1:53 :::* LISTEN
1757540/samba: task
tcp6 0 0 2600:4040:4661:9a00::53 :::* LISTEN
1757540/samba: task
udp 0 0 10.0.0.10:53 0.0.0.0:*
1757540/samba: task
udp 0 0 127.0.0.1:53 0.0.0.0:*
1757540/samba: task
udp 0 0 224.0.0.251:5353 0.0.0.0:*
8990/chrome
udp 0 0 0.0.0.0:5353 0.0.0.0:*
1580/avahi-daemon:
udp6 0 0 2600:4040:4661:9a00::53 :::*
1757540/samba: task
udp6 0 0 2600:4040:4661:9a00::53 :::*
1757540/samba: task
udp6 0 0 2600:4040:4661:9a00::53 :::*
1757540/samba: task
udp6 0 0 ::1:53 :::*
1757540/samba: task
udp6 0 0 :::5353 :::*
1580/avahi-daemon:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In all things, Be Intentional.
On Sat, Sep 9, 2023 at 3:24?PM Rowland Penny via samba <
samba at lists.samba.org> wrote:
> On Sat, 9 Sep 2023 15:11:20 -0400
> Rob Campbell via samba <samba at lists.samba.org> wrote:
>
> > [Sat Sep 09 15:09:09] [root at D01~/.bin$]net ads join -U
administrator
> > Password for [HOME\administrator]:
> > get_kdc_ip_string: get_kdc_list (site-less) fail
> > NT_STATUS_NO_LOGON_SERVERS kerberos_kinit_password
> > administrator at HOME.ROB-CAMPBELL.LAN failed: Cannot contact any KDC
> > for requested realm kerberos_kinit_password
> > D01$@HOME.ROB-CAMPBELL.LAN failed: Cannot contact any KDC for
> > requested realm Using short domain name -- HOME
> > Joined 'D01' to dns domain 'home.rob-campbell.lan'
> > kerberos_kinit_password D01$@HOME.ROB-CAMPBELL.LAN failed: Cannot
> > contact any KDC for requested realm
> > DNS update failed: kinit failed: Cannot contact any KDC for requested
> > realm
> >
> > So something is being blocked but I'm not sure what because I
opened
> > the suggested ports. Still can't contact any KDC.
> >
> >
>
> Did you turn off the Firewall ?
>
> It looks like something is getting in the way, either that or something
> is set up incorrectly.
>
> I know you said that you are using Debian, but what version and what
> version of Samba ?
> Are you using Bind9 on the DC or the internal dns server ?
>
> Rowland
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>