similar to: Kerberos credentials under multiple AD domains

I 'm trying to figure out why my samba box can 't get any information about trusted w2k ad domains. The linux samba server is a domain member of a w2k domain. Everything is fine with this domain, but I can 't get sequence numbers, nor users, nor groups from others domains in the active directory. The main error seems to be "Server not found in kerberos database" when it

Hi, Just trying to get a SLES10 machine running 3.3.4 to join a 2008 domain and getting this .... any ideas?? Running: net -d 3 -U admuser@DOM.REALM.CO.COM ads join createcomputer="REG/CN/OU/Services/" Error: [2009/05/15 13:42:13, 3] libads/sasl.c:ads_sasl_spnego_bind(780) ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 [2009/05/15 13:42:13, 3]

I reproduced error WERR_DEFAULT_JOIN_REQUIRED in two scenarios: - user account that is used to join machine to domain is not part of Domain Admin group. - OU path for computer (specified in createcomputer) is invalid In both of those cases I'm getting detailed error messages: 'insufficient access' and 'invalid path' respectively but on customer site I'm always getting:

Hi everybody, I've compiled samba 4.0.3 with gcc 4.4.4 on openindiana. But now I have a problem joining the domain.... /usr/local/samba/bin/net ads join -d 10 -U jvanthienen ... "ads_sasl_spnego_krb5_bind failed with: Miscellaneous failure (see text) : Did not find a plugin for ccache_ops, calling kinit" ... Is this ccache plugin really needed? Can I disable this and how ? any

2015-04-25 15:17 GMT+02:00 Rowland Penny <rowlandpenny at googlemail.com>: > On 25/04/15 14:02, Daniel Carrasco Mar?n wrote: > >> Sorry, I forgot to revert another test i did, but the result is the same: >> >> >> --------------------------------------------------------------------------------------------------------------------------------------- >>

On 25/04/15 15:44, Daniel Carrasco Mar?n wrote: > > > On AD server i've linked the kerberos file on samba folder: > lrwxrwxrwx 1 root root 32 abr 25 16:23 krb5.conf -> > /var/lib/samba/private/krb5.conf > > On client i've the default: > [libdefaults] > default_realm = TTU.RED > > # The following krb5.conf variables are only for MIT Kerberos.

with samba 3.5.1 if I were to join a server to the domain and specify an OU to create the computer object in, i get Failed to join domain: failed to precreate account in ou (null): Out of memory However, if I run the same command with samba 3.4.5 it works. Did the syntax change? I cannot see anything about it net ads join createcomputer="Linux_Servers" -U <user>%<pass>

We've just set up a number of linux servers to access our AD server (Windows server 2008) and now have to set up a Solaris server. I've downloaded, compiled and install Samba (3.4.2), configured kerberos and am now trying to get it to join the AD. I get the following error: samba-3.4.2/source3# net ads join -U username Enter username's password: [2009/10/13 13:10:42, 0]

Your using a samba3 config on a samba 4. Change your config base on : https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member Gr, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Schuyler Bishop > Verzonden: dinsdag 17 november 2015 17:11 > Aan: samba at lists.samba.org > Onderwerp: [Samba] Samba

I 've spent the last week troubleshooting a configuration issue regarding samba not being able to connect to other domains beside the domain of which it 's a member server (samba 3.0.14a, krb 1.3.6, w2k). I have some doubts perhaps someone can answer... Suppose this scenario: Samba name : SAMBA Main domain: DOMAINA (domain controller = DCA) Others domains : DOMAINB, DOMAINC (domain

hi all, I've got an issue during a machine join, my kerberos setup seem to be good (tested with kinit), my current version of samba is : samba 2:3.2.3-1ubuntu3 Example : net ads join -U adm-tsondag Enter adm-tsondag's password: Failed to join domain: failed to set machine spn: Out of memory We've got a very complex AD setup with something like 16 AD servers on distant sites, if you

On 17/11/15 16:38, Schuyler Bishop wrote: > Hi Louis, > > Thanks for the reply. Upon checking the URL you sent, I'm not finding > which stanzas you're referring to as being samba3 - my smb.conf looks > remarkably similar to the sample I see there. Could you perhaps be more > specific? > > Thanks, > > --Schuyler > > On Tue, Nov 17, 2015 at 11:23 AM

On 25/04/15 14:02, Daniel Carrasco Mar?n wrote: > Sorry, I forgot to revert another test i did, but the result is the same: > > --------------------------------------------------------------------------------------------------------------------------------------- >

On 25/04/15 16:24, Daniel Carrasco Mar?n wrote: > > > 2015-04-25 16:57 GMT+02:00 Rowland Penny <rowlandpenny at googlemail.com > <mailto:rowlandpenny at googlemail.com>>: > > On 25/04/15 15:44, Daniel Carrasco Mar?n wrote: > > > > On AD server i've linked the kerberos file on samba folder: > lrwxrwxrwx 1 root root 32 abr 25

On 25/04/15 17:07, Daniel Carrasco Mar?n wrote: > Thanks for all your help. > > I've got the same error, then i think maybe is a problem related with > upgrade. Maybe any wrong permissions or info on old samba server. > I'll try to create a new domain with right data and migrate all > machines (fortunately are few computers). I think is the best. > > Greetings!!

Greetings, Long-time but very occasional samba user here with a new challenge (well for me at least). The basics are that on the domain join, the computer account gets created but throws the dns error which based on my searching seems non-fatal. wbinfo -t gives me a succeeded, wbinfo -a klm.com\\me --ntlmv2 works fine but yet the net ads testjoin fails. Logs on the domain controller show

On 03/06/15 21:29, ivenhov wrote: > I reproduced error WERR_DEFAULT_JOIN_REQUIRED in two scenarios: > - user account that is used to join machine to domain is not part of Domain > Admin group. > - OU path for computer (specified in createcomputer) is invalid > > In both of those cases I'm getting detailed error messages: 'insufficient > access' and 'invalid

Hi Rowland, Thanks for the response. I stripped my smb.conf down to the bare suggestions and still have a no-go on the testjoin. This really smells to me like a kerberos configuration issue due to the computer existing in one and users authenticating from the forrest root. Unfortunately I don't know where to begin to look for answers as the kerberos configurations I've found referenced

2015-04-25 16:57 GMT+02:00 Rowland Penny <rowlandpenny at googlemail.com>: > On 25/04/15 15:44, Daniel Carrasco Mar?n wrote: > >> >> >> On AD server i've linked the kerberos file on samba folder: >> lrwxrwxrwx 1 root root 32 abr 25 16:23 krb5.conf -> >> /var/lib/samba/private/krb5.conf >> >> On client i've the default: >>

Hi Louis, Thanks for the reply. Upon checking the URL you sent, I'm not finding which stanzas you're referring to as being samba3 - my smb.conf looks remarkably similar to the sample I see there. Could you perhaps be more specific? Thanks, --Schuyler On Tue, Nov 17, 2015 at 11:23 AM L.P.H. van Belle <belle at bazuin.nl> wrote: > Your using a samba3 config on a samba 4. >