similar to: net ads join fails with "Operations error" ?

SLES 9 SP2 samba-3.0.14a-0.4 heimdal-lib-0.6.1rc3-55.15 samba-winbind-3.0.14a-0.4 pam-modules-9-18.10 pam_krb5-1.3-201.7 I've been searching for days for a concrete answer to this question: Is it possible to join an ADS domain from a Linux Samba server without having Administrator privileges? Yes or No. If so exactly what are the minimal requirements for joining the Linux box to the

Hi List, I'm attempting to join a win2k3 domain as a member server with great difficulty. I've read The HowTo, but am hung when attempting to join the Domain. I can kinit & klist Which seems good, but the ads join fails. Can someone help me understand what is causing the error listed below? Component particulars are: RH AS3, samba-3.0.14a compiled from source (./configure

Hello everybody, I have run into a problem which I am not able to resolve by myself :-( Yesterday I have added a new printer (cups) to a Samba 3.0.28a server. The new printer showed up in the network neighborhood (Windows XP) and I was able to print to the new print queue. Then I tried to publish the new printer to the AD ( we use a windows 2000 server for user administration and GPOs) with the

Problem with join to Active Directory [root@clust-master samba]# net ads join -S 10.0.0.1 -U Administrator Administrator's password: [2006/05/22 10:24:05, 0] libads/ldap.c:ads_join_realm(1640) ads_add_machine_acct (clust): Type or value exists ads_join_realm: Type or value exists [root@clust-master samba]# kinit Administrator@COROD.LOCAL Password for Administrator@COROD.LOCAL: As you can

Hi all, I'm not having any success adding samba (3.0.28 on Solaris 10) to a Windows AD server (2003 R2) per the instructions here: (In addition to much googling) http://us3.samba.org/samba/docs/man/Samba-Guide/unixclients.html#adssdm The error is: bash-3.00# /usr/sfw/sbin/net ads join -U Administrator Administrator's password: Using short domain name -- BETA Failed to set

Hi List, I'm wondering if someone can help me get past these errors Joining an ADS Domain, using samba 3.0.14a & kerberos 1.3.5. When I look at the debug output from the join attempt, it almost seems as though The join is looking for an cn or something from the AD that doesn't exist. I'm not an Windows person and the AD admins are not around to help peep this out. Can anyone

Can anybody from our experts help please? I had some trouble with joining a Win2003SP1 (SFU Schema is also installed) domain in ADS mode - config files and error logs are listed at the end. the goal is: -joining a Win2003SP1 domain (with SFU Schema) in ADS-mode -authenticate with winbind / PADL against this ads-dc (also offline for notebooks with padl cache plugin) It would be great, if

Hi List, I'm wondering if someone can help me get past these errors Joining an ADS Domain, using samba 3.0.14a & kerberos 1.3.5. When I look at the debug output from the join attempt, it almost seems as though The join is looking for an cn or something from the AD that doesn't exist. I'm not an Windows person and the AD admins are not around to help peep this out. Can anyone

Hi again all, I'm trying to get samba 3b3 working with ADS on Suse 8.0 enterprise. I've installed heimdal kerberos 0.6 with openldap support. Now when I did that, I used the configure options of: ./configure --with-openldap=/usr/local/bin --with-openldap-include=/usr/local/include --with-openldap-lib=/usr/local/lib --enable-shared=yes there's another config option of

Hi all, first of all is it possible to join a Linux machine to AD using a windows user account that is not a member of the group Domain Admins? Cause when I do this I get the following error while executing `net ads join -d 3 -U syncuser`: #net ads join -d 3 -U syncuser [2007/12/11 13:47:12, 3] param/loadparm.c:lp_load(4953) lp_load: refreshing parameters [2007/12/11 13:47:12, 3]

We have Samba 3.2.4 on two SLES 10 (one is SP1, the other SP2 64bit) machines. Both are member servers in our ADS, which was over the past month given some additional DCs, new IPs for all DCs, and upgraded to Windows 2008 (from win2003). The krb5.conf and nsswitch.conf files on the two machines are identical; the smb.conf files are *nearly* identical in their common section; the filewall rules

Hello, I'm trying to join a win2k3 ADS domain using a working config on a debian 'Lenny' (arm processor) from another machine running gentoo (x86 processor) (only changed the netbios name). Samba versions are 3.0.26a on both the machines. I'm pretty sure this is not a kerberos or ldap problem, anyone has a clue what else it could be? # net -d 3 ads join -U administrator

Hi List, I'm getting an error join an ADS Domain, using samba 3.0.14a & kerberos 1.3.5. When I look at the debug output from the join attempt, it almost seems as though The join is looking for an OU or something from the AD that doesn't exist. I'm not an Windows person and the AD admins are not around to help peep this out. Can anyone take a look at the debug output below and

Hi all, I have some problems with dynamic DNS updating. Samba 3.4.7 Windows 2003 sp2 # net ads dns register -P DNS Update failed! With debug ( -d9 ) I get this: ------ [2010/10/26 09:28:44, 3] libads/sasl.c:780(ads_sasl_spnego_bind) ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10 [2010/10/26 09:28:44, 3] libads/sasl.c:789(ads_sasl_spnego_bind) ads_sasl_spnego_bind: got server

I'm trying to learn about the interactions between SAMBA and win2k DCs. The eventual goal is to have a Win2k server with ADS working with a freeBSD SAMBA server. I've used the setup from http://oslabs.mikro-net.com/fbsd_samba.html as the basis for what I've done so far. Winbind seems to work and I can show users and groups using wbinfo although I see some things in the logs that I

Hello all, I'm having problems getting Samba to join a Windows AD. I am delegated OU admin, and have no direct access to the domain controller. We have 3 DCs in one domain where my OU exists. The users I wish to authenticate are in a different domain. I have set up Kerberos and can receive tickets correctly. I run net -d 4 ads join createcomputer=[Delegated OU] -U [account with join

I have an issue where winbind will occasionally pause for 30 seconds. # strace -T -t ls -l /share 16:52:20 read(4, "/var/lib/samba/winbindd_privileg"..., 35) = 35 <0.000009> 16:52:20 lstat("/var/lib/samba/winbindd_privileged", {st_mode=S_IFDIR|0750, st_size=72, ...}) = 0 <0.000011> 16:52:20 lstat("/var/lib/samba/winbindd_privileged/pipe",

HI, After a quite long period wehere samba was wroking well, sudenly, with an apparently good reason started do not work. This mean the user are not able to connect to server, to samba shares. this is something i could find in logs. I google it for something like: [2009/08/21 13:59:16, 0] rpc_client/cli_pipe.c:rpc_api_pipe(790) rpc_api_pipe: Remote machine DC01.mydomain pipe \NETLOGON fnum

Hi, I recently upgraded my servers from 3.0.28 to 3.0.31 trying to solve the winbind issue previously reported (Bug# 5551) but the issue is still happening in my servers. I have an ftp server (vsftpd), configured to use pam_winbind with krb5_auth and I see some random disconnects and my users cant login. My samba servers are member of a Windows 2003 domain. The relevant lines on my

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm using samba 3.0.0beta1. When I try join ADS I got error: # net ADS JOIN -U Administrator [2003/06/25 13:03:34, 1] param/loadparm.c:lp_do_parameter(3103) ~ WARNING: The "winbind uid" option is deprecated [2003/06/25 13:03:34, 1] param/loadparm.c:lp_do_parameter(3103) ~ WARNING: The "winbind gid" option is deprecated