search for: werr_default_join_requir

Hi! ivenhov skrev den 2015-06-04 10:10: > I'm trying > > sudo net ads join -S dc1001.mynat.myco.bcu -U testuser -d10 > > and also > > sudo net ads join createcomputer="My/Ou/For/Servers" -S > dc1001.mynat.myco.bcu -U testuser -d10 > > > It works for me every time in lab on real hw (same spec) and on virtualbox. > It's just this particular site

...: S-1-5-21-1219397942-1773535701-801310046 modified_config : 0x00 (0) error_string : 'failed to connect to AD: Malformed representation of principal' domain_is_ad : 0x01 (1) result : WERR_DEFAULT_JOIN_REQUIRED Failed to join domain: failed to connect to AD: Malformed representation of principal [2009/05/15 13:42:13, 2] utils/net.c:main(770) return code = -1 Thanks, Alex

...unfortunately to see exactly what's happening on AD but I can make necessary changes on samba box. At this point I'm thinking error: Failed to join domain: failed to connect to AD: Cannot contact any KDC for requested realm is a bogus and real problem lies somewhere else (shown by result WERR_DEFAULT_JOIN_REQUIRED and WERR_GENERAL_FAILURE) >> Could it be that allowing a normal user to join computers has been >> turned off ? Yes it is possible. But apparently my user should have enough permission (I sceptical) Does user doing join has to be Domain Admin, or only permission to creating object...

...a.ads.domain.com' forest_name : 'ADS.DOMAIN.COM' dn : NULL domain_sid : * domain_sid : S-1-5-21-1606980848-1965331169-1417001333 modified_config : 0x00 (0) error_string : 'failed to precreate account in ou MITKerberos/Services: Invalid DN syntax' domain_is_ad : 0x01 (1) result : WERR_DEFAULT_JOIN_REQUIRED [2012/02/09 15:45:29.014909, 10] intl/lang_tdb.c:138() lang_tdb_init: /usr/lib/samba/en_GB.UTF-8.msg: No such file or directory Failed to join domain: failed to precreate account in ou MITKerberos/Services: Invalid DN syntax [2012/02/09 15:45:29.015245, 2] utils/net.c:916() return code = -1 The...

...make necessary changes on samba box. >> >> At this point I'm thinking error: >> Failed to join domain: failed to connect to AD: Cannot >contact any KDC for >> requested realm >> >> is a bogus and real problem lies somewhere else (shown by result >> WERR_DEFAULT_JOIN_REQUIRED and WERR_GENERAL_FAILURE) >> >>>> Could it be that allowing a normal user to join computers has been >>>> turned off ? >> Yes it is possible. But apparently my user should have >enough permission (I >> sceptical) >> Does user doing join has to b...

Thank you both for the answers. I'll re-check everything again once on customer site and post my findings shortly afterwards Regards -- View this message in context: http://samba.2283325.n4.nabble.com/Cannot-join-Ubuntu12-04-Samba-4-1-17-to-domain-tp4684555p4684827.html Sent from the Samba - General mailing list archive at Nabble.com.

...box. >>> >>> At this point I'm thinking error: >>> Failed to join domain: failed to connect to AD: Cannot >> contact any KDC for >>> requested realm >>> >>> is a bogus and real problem lies somewhere else (shown by result >>> WERR_DEFAULT_JOIN_REQUIRED and WERR_GENERAL_FAILURE) >>> >>>>> Could it be that allowing a normal user to join computers has been >>>>> turned off ? >>> Yes it is possible. But apparently my user should have >> enough permission (I >>> sceptical) >>> D...

On 03/06/15 22:04, ivenhov wrote: > Thanks Rowland. > I understand smb.conf is bit messy and can affect performance but it should > not prevent me from joining domain. > > Here you go: > > [global] > workgroup = MYNAT > realm = MYNAT.MYCO.BCU > server string = My server %h > security = ADS > password server =

...: S-1-5-21-73586283-854245398-682003330 modified_config : 0x00 (0) error_string : 'failed to connect to AD: Cannot contact any KDC for requested realm' domain_is_ad : 0x01 (1) result : WERR_DEFAULT_JOIN_REQUIRED Failed to join domain: failed to connect to AD: Cannot contact any KDC for requested realm return code = -1 If I try without cretecomputer kerberos_kinit_password testuser at MYNAT.MYCO.BCU failed: Cannot contact any KDC for requested realm libnet_Join: libnet_JoinCtx: struct libnet_JoinCtx...

I reproduced error WERR_DEFAULT_JOIN_REQUIRED in two scenarios: - user account that is used to join machine to domain is not part of Domain Admin group. - OU path for computer (specified in createcomputer) is invalid In both of those cases I'm getting detailed error messages: 'insufficient access' and 'invalid path' resp...

...: S-1-5-21-264287014-3527761023-2744118974 modified_config : 0x00 (0) error_string : 'failed to precreate account in ou (null): Out of memory' domain_is_ad : 0x01 (1) result : WERR_DEFAULT_JOIN_REQUIRED Failed to join domain: failed to precreate account in ou (null): Out of memory -- Andrew Tranquada

On 03/06/15 21:29, ivenhov wrote: > I reproduced error WERR_DEFAULT_JOIN_REQUIRED in two scenarios: > - user account that is used to join machine to domain is not part of Domain > Admin group. > - OU path for computer (specified in createcomputer) is invalid > > In both of those cases I'm getting detailed error messages: 'insufficient > access' an...

...54245398-682003330 > modified_config : 0x00 (0) > error_string : 'failed to connect to AD: Cannot > contact any KDC for requested realm' > domain_is_ad : 0x01 (1) > result : WERR_DEFAULT_JOIN_REQUIRED > Failed to join domain: failed to connect to AD: Cannot contact any KDC for > requested realm > return code = -1 > > If I try without cretecomputer > > kerberos_kinit_password testuser at MYNAT.MYCO.BCU failed: Cannot contact any > KDC for requested realm > libnet_Join...

...: S-1-5-21-73586283-854245398-682003330 modified_config : 0x00 (0) error_string : 'failed to connect to AD: Cannot contact any KDC for requested realm' domain_is_ad : 0x01 (1) result : WERR_DEFAULT_JOIN_REQUIRED Failed to join domain: failed to connect to AD: Cannot contact any KDC for requested realm return code = -1 myuser at myserver:~$ myuser at myserver:~$ myuser at myserver:~$ myuser at myserver:~$ -- View this message in context: http://samba.2283325.n4.nabble.com/Cannot-join-Ubuntu12-04-Samba...

...54245398-682003330 > modified_config : 0x00 (0) > error_string : 'failed to connect to AD: Cannot > contact any KDC for requested realm' > domain_is_ad : 0x01 (1) > result : WERR_DEFAULT_JOIN_REQUIRED > Failed to join domain: failed to connect to AD: Cannot contact any KDC for > requested realm > return code = -1 > myuser at myserver:~$ > myuser at myserver:~$ > myuser at myserver:~$ > myuser at myserver:~$ > > > > > -- > View this message in context: htt...