samba - Aug 2024 - Samba as a Member-Server with a WIndowsServer2022-PDC

Hi there,

I try to join a Samba-Server (4.17.12) in a WindowsServer2022 Domain 
(net ads join -U...).

The result is:

Failed to join domain: failed to lookup DC info for domain 'HMW.DE' over
rpc: Indicates a referenced user name and authentication information are 
valid, but some user account restriction has prevented successful 
authentication (such as time-of-day restrictions).

DNS is working fine:

sh-4.4# nslookup
 > set type=SRV
 > _ldap._tcp.HMW.DE
Server:???????? 192.168.10.1
Address:??????? 192.168.10.1#53

_ldap._tcp.HMW.DE?????? service = 0 100 389 srv-pdc.hmw.de.

I tried different credentials from administrator group and administrator 
himself - no success.

I've googled my fingers to the bone, but I can't find the correct 
setting in group policy editor on my pdc (and yes, I gpupdated the 
settings everytime with /force).

Has anybody a idea for me?

Thanks a lot.


Matthias

On Mon, 26 Aug 2024 11:52:16 +0200
Matthias Reichenbach von Nordheim via samba <samba at lists.samba.org>
wrote:
> Hi there,
> 
> I try to join a Samba-Server (4.17.12) in a WindowsServer2022 Domain 
> (net ads join -U...).
> 
> The result is:
> 
> Failed to join domain: failed to lookup DC info for domain 'HMW.DE'
> over rpc: Indicates a referenced user name and authentication
> information are valid, but some user account restriction has
> prevented successful authentication (such as time-of-day
> restrictions).
> 
> DNS is working fine:
> 
> sh-4.4# nslookup
>  > set type=SRV
>  > _ldap._tcp.HMW.DE
> Server:???????? 192.168.10.1
> Address:??????? 192.168.10.1#53
> 
> _ldap._tcp.HMW.DE?????? service = 0 100 389 srv-pdc.hmw.de.
> 
> I tried different credentials from administrator group and
> administrator himself - no success.
> 
> I've googled my fingers to the bone, but I can't find the correct 
> setting in group policy editor on my pdc (and yes, I gpupdated the 
> settings everytime with /force).
> 
> Has anybody a idea for me?
> 
> Thanks a lot.
> 
> 
> Matthias
Can we start by you telling us what OS you are trying to join from and
what is in the smb.conf on that machine.

Rowland