search for: mynat

...b.conf has security = ads and correct realm. > > I can resolve DNS name of the KDC and AD. Reverse lookup is also OK. > Time is correct on the server and is synced with NTP server. > > But I still cannot joint it to domain. Most recent error I get: > > > saf_store: domain = [MYNAT], server = [BGB48DC1001.mynat.myco.bcu], expire = > [1433259373] > Adding cache entry with key=[SAF/DOMAIN/MYNAT] and timeout=[Tue Jun 2 > 15:36:13 2015 UTC] (900 seconds ahead) > tdb_traverse with wipe_fn on gencache_notrans.tdb failed: Success > saf_store: domain = [mynat.myco.bcu...

On 03/06/15 22:04, ivenhov wrote: > Thanks Rowland. > I understand smb.conf is bit messy and can affect performance but it should > not prevent me from joining domain. > > Here you go: > > [global] > workgroup = MYNAT > realm = MYNAT.MYCO.BCU > server string = My server %h > security = ADS > password server = dc1001.mynat.myco.bcu > map to guest = Bad User > obey pam restrictions = Yes > pam password change = Yes > pa...

Thank you both for the answers. I'll re-check everything again once on customer site and post my findings shortly afterwards Regards -- View this message in context: http://samba.2283325.n4.nabble.com/Cannot-join-Ubuntu12-04-Samba-4-1-17-to-domain-tp4684555p4684827.html Sent from the Samba - General mailing list archive at Nabble.com.

Hi! ivenhov skrev den 2015-06-04 10:10: > I'm trying > > sudo net ads join -S dc1001.mynat.myco.bcu -U testuser -d10 > > and also > > sudo net ads join createcomputer="My/Ou/For/Servers" -S > dc1001.mynat.myco.bcu -U testuser -d10 > > > It works for me every time in lab on real hw (same spec) and on virtualbox. > It's just this particular site (wi...

Thanks Rowland. I understand smb.conf is bit messy and can affect performance but it should not prevent me from joining domain. Here you go: [global] workgroup = MYNAT realm = MYNAT.MYCO.BCU server string = My server %h security = ADS password server = dc1001.mynat.myco.bcu map to guest = Bad User obey pam restrictions = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd...

...ll no luck though. I've modified scripts as they had some bugs, my output and modified version at the end. As I mentioned, I don't have any issues with joining samba 4.1 or 4.2 in the lab, only on that site. >> if so, try the following. >> in resolv.conf, add >> search mynat.myco.bcu myco.bcu I haven't tried that yet. Will do next. There is myco.bcu domain along with mynat.myco.bcu, I'm not sure if that makes it more tricky. In the meantime there were some firewall issues discovered and fixed (filtering of the IPs connecting to LDAP ports). Issue persists th...

...ba 3.6 (which could join domain). smb.conf has security = ads and correct realm. I can resolve DNS name of the KDC and AD. Reverse lookup is also OK. Time is correct on the server and is synced with NTP server. But I still cannot joint it to domain. Most recent error I get: saf_store: domain = [MYNAT], server = [BGB48DC1001.mynat.myco.bcu], expire = [1433259373] Adding cache entry with key=[SAF/DOMAIN/MYNAT] and timeout=[Tue Jun 2 15:36:13 2015 UTC] (900 seconds ahead) tdb_traverse with wipe_fn on gencache_notrans.tdb failed: Success saf_store: domain = [mynat.myco.bcu], server = [BGB48DC1001....

..., my output and >modified version >> at the end. >> As I mentioned, I don't have any issues with joining samba >4.1 or 4.2 in the >> lab, only on that site. >> >>>> if so, try the following. >>>> in resolv.conf, add >>>> search mynat.myco.bcu myco.bcu >> I haven't tried that yet. Will do next. >> >> There is myco.bcu domain along with mynat.myco.bcu, I'm not >sure if that >> makes it more tricky. >> In the meantime there were some firewall issues discovered and fixed >> (filtering...

...rsion >>> at the end. >>> As I mentioned, I don't have any issues with joining samba >> 4.1 or 4.2 in the >>> lab, only on that site. >>> >>>>> if so, try the following. >>>>> in resolv.conf, add >>>>> search mynat.myco.bcu myco.bcu >>> I haven't tried that yet. Will do next. >>> >>> There is myco.bcu domain along with mynat.myco.bcu, I'm not >> sure if that >>> makes it more tricky. >>> In the meantime there were some firewall issues discovered and f...

...made all changes to 3 files you mentioned, also removed everything > except localhost in hosts file. > SO I have minimal smb.conf and minimal krb5 file > > Unfortunately error is still the same. > > If I try to join with full OU path I get kerberos_kinit_password > testuser at MYNAT.MYCO.BCU failed: Cannot contact any KDC for requested realm How are you trying to join the domain? what command are you actually using? It seems that the KDC cannot be found, just what are you trying to join to? All I can say is that it works for me against a samba4 AD DC Rowland > libnet_Jo...

I've made all changes to 3 files you mentioned, also removed everything except localhost in hosts file. SO I have minimal smb.conf and minimal krb5 file Unfortunately error is still the same. If I try to join with full OU path I get kerberos_kinit_password testuser at MYNAT.MYCO.BCU failed: Cannot contact any KDC for requested realm libnet_Join: libnet_JoinCtx: struct libnet_JoinCtx out: struct libnet_JoinCtx account_name : NULL netbios_domain_name : 'MYNAT' dns_domain_name : 'mynat....