similar to: net command - createcomputer parameter

Hello, We are using samba-3.0.25a and we want to join our system onto the Active Directory server in a specific location. The argument 'createcomputer' is exactly what we want and it works perfectly when we do a 'net ads join' but fails when we do a 'net rpc join'. The computer object always gets created in the 'Computers' folder. Looking at the code it appears

On 12/04/16 12:09, John Rowe wrote: > I am trying to reconfigure a samba server to use authentication from the University domain. > > * smbd seems to start OK > * net ads testjoin is fine > * net ads join -U xxUSERNAME createcomputer="xxCOMPUTER" fails with: > Failed to join domain: failed to set machine spn: Constraint violation > > (where xxTEXT indicates

I am trying to reconfigure a samba server to use authentication from the University domain. * smbd seems to start OK * net ads testjoin is fine * net ads join -U xxUSERNAME createcomputer="xxCOMPUTER" fails with: Failed to join domain: failed to set machine spn: Constraint violation (where xxTEXT indicates redaction - sorry I'm not sure what's confidential and what isn't)

Thanks for the reply Rowland: On Tue, 2016-04-12 at 12:21 +0100, Rowland penny wrote: > > Try again without the 'createcomputer="xxCOMPUTER"', your computer > seems > to already exist: > > The machine account already exists in the specified OU. I am told this is in fact a necessary feature: xxCOMPUTER is a class of computers we are allowed to be one. John

Quoting Dan Oriani via samba <samba at lists.samba.org>: > Quoting Dan Oriani via samba <samba at lists.samba.org>: > >> Quoting Rowland Penny via samba <samba at lists.samba.org>: >> >>> On Tue, 06 Feb 2018 14:09:08 -0500 >>> Dan Oriani via samba <samba at lists.samba.org> wrote: >>> >>>> >>>> I'm

On Tue, 06 Feb 2018 14:09:08 -0500 Dan Oriani via samba <samba at lists.samba.org> wrote: > > I'm not opposed to the idea. Does 'net ads join' support supplying > the machine name as the user, and the one-time-password given to it? > The only reason I'm using adcli at all is the preset-computer option > which I couldn't find an analogue to in 'net

Quoting Dan Oriani via samba <samba at lists.samba.org>: > Quoting Rowland Penny via samba <samba at lists.samba.org>: > >> On Tue, 06 Feb 2018 14:09:08 -0500 >> Dan Oriani via samba <samba at lists.samba.org> wrote: >> >>> >>> I'm not opposed to the idea. Does 'net ads join' support supplying >>> the machine name as

Quoting Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 06 Feb 2018 14:09:08 -0500 > Dan Oriani via samba <samba at lists.samba.org> wrote: > >> >> I'm not opposed to the idea. Does 'net ads join' support supplying >> the machine name as the user, and the one-time-password given to it? >> The only reason I'm using adcli at

On Fri, 15 Mar 2019 11:57:19 +0000 Zendal Darkman <zendal.darkman at gmail.com> wrote: > Actually it is okay to criticise without giving a solution, if > alternate action is evident. It obviously isn't evident, or the wiki wouldn't have been written in the way it is. >HOWEVER, "upon reflection" the tone of the message was wrong, and I >apologise for it.

Quoting Dan Oriani via samba <samba at lists.samba.org>: > Quoting Dan Oriani via samba <samba at lists.samba.org>: > >> Quoting Dan Oriani via samba <samba at lists.samba.org>: >> >>> Quoting Rowland Penny via samba <samba at lists.samba.org>: >>> >>>> On Tue, 06 Feb 2018 14:09:08 -0500 >>>> Dan Oriani via samba

Hi, I'm seeing this error on 3.0.24, 3.0.28, 3.0.32 and 3.2.6: Failed to join domain: failed to set machine spn: Constraint violation [Sanitised] First Run: net ads join createupn=HOST/FQDN@DOM.REALM.DOMAIN.COM createcomputer="OU/OU/OU/Services" -U username -d1 Enter username's password: [2008/12/11 17:02:32, 1] libnet/libnet_join.c:libnet_Join(1770) libnet_Join:

Has anyone had any success using net ads join to create a new service principal and join Active Directory using samba 3.5.8. This works fine in 3.0.35 but I'm not able to get a working create/join with 3.5.8 In samba 3.0.35 (on a host which is already allowing kerberised loginsvia AD), the following works: net ads join createupn='CIFS/host.domain.com' \

Victor, I just spent hours searching for the solution to the same problem you are having using samba version 3.0.25b after an upgrade from version 3.0.10. the resolution for me was posted by Volker Lendecke: " > Make sure that the fully qualified domain name and your host name > differ in the sense that you actually have a domain appended. > > Under Linux, "hostname"

Your using a samba3 config on a samba 4. Change your config base on : https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member Gr, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Schuyler Bishop > Verzonden: dinsdag 17 november 2015 17:11 > Aan: samba at lists.samba.org > Onderwerp: [Samba] Samba

On 17/11/15 16:38, Schuyler Bishop wrote: > Hi Louis, > > Thanks for the reply. Upon checking the URL you sent, I'm not finding > which stanzas you're referring to as being samba3 - my smb.conf looks > remarkably similar to the sample I see there. Could you perhaps be more > specific? > > Thanks, > > --Schuyler > > On Tue, Nov 17, 2015 at 11:23 AM

On Sat, 2 Mar 2019 10:25:49 +0100 Michael Ströder <michael at stroeder.com> wrote: > On 3/1/19 10:17 PM, Rowland Penny via samba wrote: > > You don't need to precreate the computer, the join with 'net' will > > do it for you. > > But then I need to have administrative rights on the OU for the admin > doing the actual join. For security reasons I

Greetings, Long-time but very occasional samba user here with a new challenge (well for me at least). The basics are that on the domain join, the computer account gets created but throws the dns error which based on my searching seems non-fatal. wbinfo -t gives me a succeeded, wbinfo -a klm.com\\me --ntlmv2 works fine but yet the net ads testjoin fails. Logs on the domain controller show

Folks, I'm trying to get said Samba version connecting to a new domain controller. Previously it was v3.0.33 talking to a Win2k3 DC. Smb.conf is correct with new domain and Kerberos realms, /etc/krb5.conf has the new info, I can kinit successfully with a domain user but net join ads fails with: "kinit succeeded but ads_sasl_spnego_krb5_bind failed: Decrypt integrity check failed"

Hi, I have a Ubuntu server 12.4.LTS running version 3.6.3 of winbindd. I use the MS AD to authenticate users, this works fine while there is no problems with the AD server. If the AD server reboots the winbind never switches to other AD servers, there are 4 here. I used this to joint the domain: net join -U admin createcomputer="OU=Servers,OU=abc,DC=domain,DC=com I can't find

Hi Rowland, Thanks for the response. I stripped my smb.conf down to the bare suggestions and still have a no-go on the testjoin. This really smells to me like a kerberos configuration issue due to the computer existing in one and users authenticating from the forrest root. Unfortunately I don't know where to begin to look for answers as the kerberos configurations I've found referenced