samba - Jun 2024 - Member server: Failed to join domain: failed to find DC for

On Sat, 8 Jun 2024 17:41:57 +0100
Luis Peromarta via samba <samba at lists.samba.org> wrote:
> All,
> 
> Doing some testing with 4.20.1 on a member server. I have no
> explanation for this.
> 
> ?Member? member is just a test machine, I joined to domain *with* net
> ads join, no issues. A few minutes later ...
> 
> root at member:/etc/samba# net ads leave domain -U luis
> Password for [MAD\luis]:
> Deleted account for 'MEMBER' in realm 'MAD.MATER.INT'
> 
> root at member:/etc/samba# net ads join domain -U luis
> Password for [MAD\luis]:
> Failed to join domain: failed to find DC for domain domain - A domain
> controller for this domain was not found.
I have never run those commands like that, I normally run 'net ads join
-Uadministrator' or 'net ads leave -Uadministrator', I have never
specified the domain.
> 
> root at member:/etc/samba# samba-tool domain join mad.mater.int -U luis
> WARNING: Using passwords on command line is insecure. Installing the
> setproctitle python module will hide these from shortly after program
> start. Password for [MAD\luis]: Joined domain mad.mater.int
> (S-1-5-21-2152908145-95474353-1514027631)
> 
> 
> net ads join fail while samba-tool domain join works. ??
In my opinion neither should work, the command should be 'samba-tool
domain join mad.mater.int MEMBER' otherwise it will default to 'DC'.
> 
> The usual suspects have been checked, I have not changed anything in
> the config. Not that this is a very big issue, just out of curiosity.
> 
> LP
Rowland

LP
On Jun 8, 2024 at 17:56 +0100, samba at lists.samba.org <samba at
lists.samba.org>, wrote:
>
> I have never run those commands like that, I normally run 'net ads join
> -Uadministrator' or 'net ads leave -Uadministrator', I have
never
> specified the domain.
I did specify domain out of frustration I think. More test as per your inputs:
(net ads join fails)


root at member:~# net ads join domain -Uadministrator
Password for [MAD\administrator]:
Failed to join domain: failed to find DC for domain domain - A domain controller
for this domain was not found.

root at member:~# samba-tool domain join mad.mater.int MEMBER -Uadministrator
WARNING: Using passwords on command line is insecure. Installing the
setproctitle python module will hide these from shortly after program start.
Password for [MAD\administrator]:
DNS Update for member.mad.mater.int failed: ERROR_DNS_UPDATE_FAILED
DNS update failed: NT_STATUS_UNSUCCESSFUL
Joined domain mad.mater.int (S-1-5-21-2152908145-95474353-1514027631)


I leave domain again and then: (don?t specify MEMBER seems to work)

root at member:~# samba-tool domain join mad.mater.int -Uadministrator
WARNING: Using passwords on command line is insecure. Installing the
setproctitle python module will hide these from shortly after program start.
Password for [MAD\administrator]:
DNS Update for member.mad.mater.int failed: ERROR_DNS_UPDATE_FAILED
DNS update failed: NT_STATUS_UNSUCCESSFUL
Joined domain mad.mater.int (S-1-5-21-2152908145-95474353-1514027631)