similar to: Domain Member Server problems

Hello, I'm trying to join a win2k3 ADS domain using a working config on a debian 'Lenny' (arm processor) from another machine running gentoo (x86 processor) (only changed the netbios name). Samba versions are 3.0.26a on both the machines. I'm pretty sure this is not a kerberos or ldap problem, anyone has a clue what else it could be? # net -d 3 ads join -U administrator

Hi all, first of all is it possible to join a Linux machine to AD using a windows user account that is not a member of the group Domain Admins? Cause when I do this I get the following error while executing `net ads join -d 3 -U syncuser`: #net ads join -d 3 -U syncuser [2007/12/11 13:47:12, 3] param/loadparm.c:lp_load(4953) lp_load: refreshing parameters [2007/12/11 13:47:12, 3]

Hello all, As the subject says, as far as I can tell everything works on my ads integrated samba server. Domain accounts can be used for ssh, and accessing shares, I just can't leave the domain. Here is a successful join command followed by an unsuccessful leave command at debug level 4. Any ideas? TIA, Mark user@dordal:~$ sudo net ads join -U administrator@MYDOMAIN.COM -d 4 [2009/03/19

Hello all, I'm having problems getting Samba to join a Windows AD. I am delegated OU admin, and have no direct access to the domain controller. We have 3 DCs in one domain where my OU exists. The users I wish to authenticate are in a different domain. I have set up Kerberos and can receive tickets correctly. I run net -d 4 ads join createcomputer=[Delegated OU] -U [account with join

I am running Samba ver 3.0.37 on Solaris 10 (sparc) as a PDC with LDAP for the backend for both samba and unix accounts. Assume the samba SMBPDC is called "PDC." I have also set up a trust with an Windows domain- lets call it WINDOMAIN- (the PDC for the Windows domain is Win 2003 but is in mixed mode for backwards compat.) The SAMBA domain trusts the WINDOWS domain, not not vice

After migrating from 3.0.26a to 3.0.30 I cannot join my AD member server to the domain anymore: I get a DCERPC_FAULT_INVALID_TAG. As I didn't change my Windows 2000 SBS Server, this looks like a new feature in Samba 3.0.30. Do I have to also migrate my Heimdal - if so, which version is required? Kind regards, Jens P.S: Is there a way to find out the code changes in Samba 3.0.30? I

with samba 3.5.1 if I were to join a server to the domain and specify an OU to create the computer object in, i get Failed to join domain: failed to precreate account in ou (null): Out of memory However, if I run the same command with samba 3.4.5 it works. Did the syntax change? I cannot see anything about it net ads join createcomputer="Linux_Servers" -U <user>%<pass>

Hi, SLES10 SP2 x86_64 + Samba from repo (samba-3.2.4-8.1) When I try to join (net ads join -U Administrator), I get : Failed to join domain: failed to set machine spn: Can't contact LDAP server My Pre-2000 domain name is CLSC_COTENEIGES My DNS ADS name is clsccdn.rtss.qc.ca DNS is ok, I've created an A/PTR record for linux box, ADS seems ok also (netdiag/dcdiag) i've tryied adding

Hello everybody, I have run into a problem which I am not able to resolve by myself :-( Yesterday I have added a new printer (cups) to a Samba 3.0.28a server. The new printer showed up in the network neighborhood (Windows XP) and I was able to print to the new print queue. Then I tried to publish the new printer to the AD ( we use a windows 2000 server for user administration and GPOs) with the

SLES 9 SP2 samba-3.0.14a-0.4 heimdal-lib-0.6.1rc3-55.15 samba-winbind-3.0.14a-0.4 pam-modules-9-18.10 pam_krb5-1.3-201.7 I've been searching for days for a concrete answer to this question: Is it possible to join an ADS domain from a Linux Samba server without having Administrator privileges? Yes or No. If so exactly what are the minimal requirements for joining the Linux box to the

Hi List, I'm attempting to join a win2k3 domain as a member server with great difficulty. I've read The HowTo, but am hung when attempting to join the Domain. I can kinit & klist Which seems good, but the ads join fails. Can someone help me understand what is causing the error listed below? Component particulars are: RH AS3, samba-3.0.14a compiled from source (./configure

Afternoon! Let me apologize first if this is something soooo simple, but i have been working on this for days and I'm still stuck on one part. Where to start. Small user environment (under 100 users) using Active Directory on Win 2k3 server. Running Fedora 8 on a server, and I am trying to get it added to the domain, and to be able to access a share using Windows usernames and passwords.

Hi List, I'm getting an error join an ADS Domain, using samba 3.0.14a & kerberos 1.3.5. When I look at the debug output from the join attempt, it almost seems as though The join is looking for an OU or something from the AD that doesn't exist. I'm not an Windows person and the AD admins are not around to help peep this out. Can anyone take a look at the debug output below and

hi all, I've got an issue during a machine join, my kerberos setup seem to be good (tested with kinit), my current version of samba is : samba 2:3.2.3-1ubuntu3 Example : net ads join -U adm-tsondag Enter adm-tsondag's password: Failed to join domain: failed to set machine spn: Out of memory We've got a very complex AD setup with something like 16 AD servers on distant sites, if you

Hi list, I've just upgrade my current samba config to 3.0.23c on Suse 9.1. x86 I join my active directory 2003 domain and 'getent passwd' works fine but each time I run 'getent group' winbind crash I deleted the winbindd_cache.tdb but nothing better wbinfo -u / wbinfo -g works wbinfo -t tells "checking the trust secret via RPC calls succeeded" Can someone help me I

Hello, I am using the brand new SuSE 9.0 with Samba 3.0.0. I installed: Heimdal kerberos development libraries 0.6-67, Openldap development libraries 2.2.22-65, which are shipped with the distribution. If I running "kinit administrator@NWTRADERS.COM" I am getting a ticket. But if I try to run "net ads join -U administrator@NWTRADERS.COM" I am getting following messages:

On FreeBSD 6.0-RELEASE-p2 using samba-3.0.21a,1 the net command seg faults. Does anyone know what is going on? Thanks -rcollins ----- net ads join -Uadministrator -d 10 ----- [2006/01/23 12:36:59, 5] lib/debug.c:debug_dump_status(368) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0

Hi Guys, I'm having trouble with joining a W2K3 Native Mode Domain. Can anyone point me in the right direction to look for answers? I intslled from rc3 SRPM. When I do: net ads join DOMAIN -U domadm@REALM -d10 I get this error towards the end. Thanks, Dulantha. .... .... [2003/09/10 17:48:27, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 2 840 113554 1 2 2 3 [2003/09/10

I have been using 2003 AD servers for winbind for many years, and now 2008 is phasing in, but I can't authenticate using the new servers, and I'm not sure what to do. All advice very welcome. This is a problem for me on both Gentoo (samba 3.0.33) and Debian Lenny (samba 3.0.24). For debugging, I ran winbind interactively and piped output to a file (winbindd -d 3 -i). I have also

I've been trying to get Kerberos to work for the last couple of days so that we can use SSO. I can't seem to get past a roadblock and Google doesn't seem to provide any answers. I've got Samba connected to the AD and running. I can wbinfo everything and can login to the machine using PAM with the pam_winbind modules just fine. I can get user tickets just fine. When I try to get ssh