similar to: "Failed to set servicePrincipalNames" join ADS issue.

Hello, We are using samba-3.0.25a and we want to join our system onto the Active Directory server in a specific location. The argument 'createcomputer' is exactly what we want and it works perfectly when we do a 'net ads join' but fails when we do a 'net rpc join'. The computer object always gets created in the 'Computers' folder. Looking at the code it appears

I am trying to reconfigure a samba server to use authentication from the University domain. * smbd seems to start OK * net ads testjoin is fine * net ads join -U xxUSERNAME createcomputer="xxCOMPUTER" fails with: Failed to join domain: failed to set machine spn: Constraint violation (where xxTEXT indicates redaction - sorry I'm not sure what's confidential and what isn't)

Hi, I'm seeing this error on 3.0.24, 3.0.28, 3.0.32 and 3.2.6: Failed to join domain: failed to set machine spn: Constraint violation [Sanitised] First Run: net ads join createupn=HOST/FQDN@DOM.REALM.DOMAIN.COM createcomputer="OU/OU/OU/Services" -U username -d1 Enter username's password: [2008/12/11 17:02:32, 1] libnet/libnet_join.c:libnet_Join(1770) libnet_Join:

Has anyone had any success using net ads join to create a new service principal and join Active Directory using samba 3.5.8. This works fine in 3.0.35 but I'm not able to get a working create/join with 3.5.8 In samba 3.0.35 (on a host which is already allowing kerberised loginsvia AD), the following works: net ads join createupn='CIFS/host.domain.com' \

With Samba 3.0.23c I am unable to join the server to AD. The command and messages return: # ./net ads join createcomputer=OUlevel1/OUlevel2/Servers -Uadminacct adminacct's password: Using short domain name -- DOMAIN Failed to set servicePrincipalNames. Please ensure that the DNS domain of this server matches the AD domain, Or rejoin with using Domain Admin credentials. Disabled account for

On Tue, 06 Feb 2018 14:09:08 -0500 Dan Oriani via samba <samba at lists.samba.org> wrote: > > I'm not opposed to the idea. Does 'net ads join' support supplying > the machine name as the user, and the one-time-password given to it? > The only reason I'm using adcli at all is the preset-computer option > which I couldn't find an analogue to in 'net

Quoting Dan Oriani via samba <samba at lists.samba.org>: > Quoting Rowland Penny via samba <samba at lists.samba.org>: > >> On Tue, 06 Feb 2018 14:09:08 -0500 >> Dan Oriani via samba <samba at lists.samba.org> wrote: >> >>> >>> I'm not opposed to the idea. Does 'net ads join' support supplying >>> the machine name as

I have been trying to successfully join a Windows 2008 AD server using net ads join createcomputer="<OUname>" -U <usename>%password? for days and have been unsuccessful.? smb.conf and krb5.conf files are below.? It fails with a message "Cannot contact any KDC for requested realm".? I have checked all the service records via dig +short _ldap._tcp.mydomain.com

Hi We are facing some issue While joining samba server to AD We have ClearCase VOB server on AIX 5.3 with TL 12 and SAMBA version 3.5.0 installed on Aix server. The AD server is Windows 2008 R2. We are unable to Join Samba server to AD . Command: net ads join createcomputer=<OU> -U <username> Please find the details smb.conf. Please advice on resolving this issue is highly

Greetings, Long-time but very occasional samba user here with a new challenge (well for me at least). The basics are that on the domain join, the computer account gets created but throws the dns error which based on my searching seems non-fatal. wbinfo -t gives me a succeeded, wbinfo -a klm.com\\me --ntlmv2 works fine but yet the net ads testjoin fails. Logs on the domain controller show

with samba 3.5.1 if I were to join a server to the domain and specify an OU to create the computer object in, i get Failed to join domain: failed to precreate account in ou (null): Out of memory However, if I run the same command with samba 3.4.5 it works. Did the syntax change? I cannot see anything about it net ads join createcomputer="Linux_Servers" -U <user>%<pass>

Quoting Dan Oriani via samba <samba at lists.samba.org>: > Quoting Dan Oriani via samba <samba at lists.samba.org>: > >> Quoting Dan Oriani via samba <samba at lists.samba.org>: >> >>> Quoting Rowland Penny via samba <samba at lists.samba.org>: >>> >>>> On Tue, 06 Feb 2018 14:09:08 -0500 >>>> Dan Oriani via samba

Hi Louis, Thanks for the reply. Upon checking the URL you sent, I'm not finding which stanzas you're referring to as being samba3 - my smb.conf looks remarkably similar to the sample I see there. Could you perhaps be more specific? Thanks, --Schuyler On Tue, Nov 17, 2015 at 11:23 AM L.P.H. van Belle <belle at bazuin.nl> wrote: > Your using a samba3 config on a samba 4. >

Thanks for the reply Rowland: On Tue, 2016-04-12 at 12:21 +0100, Rowland penny wrote: > > Try again without the 'createcomputer="xxCOMPUTER"', your computer > seems > to already exist: > > The machine account already exists in the specified OU. I am told this is in fact a necessary feature: xxCOMPUTER is a class of computers we are allowed to be one. John

Hi, Just trying to get a SLES10 machine running 3.3.4 to join a 2008 domain and getting this .... any ideas?? Running: net -d 3 -U admuser@DOM.REALM.CO.COM ads join createcomputer="REG/CN/OU/Services/" Error: [2009/05/15 13:42:13, 3] libads/sasl.c:ads_sasl_spnego_bind(780) ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 [2009/05/15 13:42:13, 3]

When joining our Solaris 10 Samba 3.0.23 system to ADS via... # /usr/local/samba/bin/net ads join -U Administrator Administrator's password: Using short domain name -- ULS Failed to set servicePrincipalNames. Only NTLM authentication will be possible. Please ensure that the DNS domain of this server matches the AD domain, Or rejoin with using Domain Admin credentials. Joined

Hi, We have a couple of RHEL7 gluster storage servers with samba/ctdb. Both have joined the domain successfully (the ctdb service was started and net ads join issued on both). A container was created by the AD admin and I specified this using createcomputer=OU when I issued the net ads command on both machines. As far as I can tell on the RHGS servers everything looks OK. However the AD admin

Hi all I have a linux server with RHEL 4.0 ES with Samba 3.0.23c . I am trying to integrate it with our Windows 2003 Active directory. our Windows domain is EXAMPLE.COM and netbios name of the server is EXAMPLE. The hostname of our Active directory is lesl-dom. when we are joining to the domain we are getting the following error. ##########################################################

Folks, I'm trying to get said Samba version connecting to a new domain controller. Previously it was v3.0.33 talking to a Win2k3 DC. Smb.conf is correct with new domain and Kerberos realms, /etc/krb5.conf has the new info, I can kinit successfully with a domain user but net join ads fails with: "kinit succeeded but ads_sasl_spnego_krb5_bind failed: Decrypt integrity check failed"

Hi, I have a Ubuntu server 12.4.LTS running version 3.6.3 of winbindd. I use the MS AD to authenticate users, this works fine while there is no problems with the AD server. If the AD server reboots the winbind never switches to other AD servers, there are 4 here. I used this to joint the domain: net join -U admin createcomputer="OU=Servers,OU=abc,DC=domain,DC=com I can't find