similar to: Winbind not working - Not able to join Domain - Unable to initialize domain list

On 16/03/2020 10:05, Sac Isilia wrote: > Hi Rowland, > > Sorry typo. We are not using sssd. We are using winbind. > Okay, in which case, the join will always fail, your new machine is NOT in the active directory dns domain. You posted in your smb.conf: password server = 10.19.26.136 From your /etc/hosts: 10.19.59.58 emdc1ftpl03.dmz.local? emdc1ftpl03 and 10.19.26.136???

On 15/03/2020 13:51, Sac Isilia wrote: > Hi Rowland, Please do not send posts directly to me, send them to the list. > > I am running RHEL 6.8 and try to join to EMEA-MEDIA domain. Below is > the output of net ads join in the debug mode. It seems that it is not > able to find the DC info however I have updated the DC in resolv.conf > , ntp.conf and krb5.conf as well. I

On 11/12/2019 14:10, Sac Isilia wrote: > Hi Rowland, > > The good news is that server is joined to EMEA-MEDIA domain. But I can > not id my user however SID is returned when I run wbinfo. > > root at esmad1apl01:~# wbinfo -t > checking the trust secret for domain EMEA-MEDIA via RPC calls succeeded > root at esmad1apl01:~# wbinfo -m > BUILTIN > ESMAD1APL01 >

Hi Belle, Below is the output after I performed the suggested steps. root at esmad1apl01:~# net ads join -U media\\svc_domjoin02 -d6 INFO: Current debug levels: all: 6 tdb: 6 printdrivers: 6 lanman: 6 smb: 6 rpc_parse: 6 rpc_srv: 6 rpc_cli: 6 passdb: 6 sam: 6 auth: 6 winbind: 6 vfs: 6 idmap: 6 quota: 6 acls: 6 locking: 6 msdfs: 6 dmapi: 6 registry: 6

On 03/12/2019 09:58, Sac Isilia wrote: > Hi Rowland, > > The dns domain is - emea.media.global.loc? . > OK, it looks like you need a few changes ;-) Remove the '127.0.1.1' line from /etc/hosts Make /etc/resolv.conf look like this: search emea.media.global.loc nameserver `ipaddress of a DC' nameserver `ipaddress of another DC' You might have to stop Network manager

Hi Rowland, The line 60 contains "{" in the script. The exit 1 statement is on line number 58. Am I missing something? Regards Sachin Kumar On Fri, Nov 29, 2019 at 5:21 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 29/11/2019 11:28, Sac Isilia wrote: > > Hi Rowland, > > > > I get below error while running the script again. > >

Hi Rowland, I get below error while running the script again. bash samba-collect-debug-info.sh > samba-output kinit: Client's credentials have been revoked while getting initial credentials cat samba-output Please wait, collecting debug info. Wrong password or kerberos REALM problems, exiting now. Below is my /etc/krb5.conf [libdefaults] default_realm = EMEA.MEDIA.GLOBAL.LOC

I've re-read this thread but its a bit confusing due to 2 persons with the same probem in one thread. Im thinking here, how is samba started, since winbind is not running. Im suspecting samba-addc or samba is starting. Not smbd nmbd winbind. I suggest to run this: Disable that all again. systemctl disable samba-addc samba smbd nmbd winbind systemctl mask samba-addc samba smbd nmbd

I'm trying to join a RHEL 5 client to a Windows 2008 R2 AD, I've tried both Samba 3.6.6 and 4.0.2. When pointing the client to a RWDC(wegsfes19123) I'm able to successfully join the client: [root at vm-ae67a ~]# net ads join -U Administrator -d1 -Swegsfes19123 ... libnet_Join: libnet_JoinCtx: struct libnet_JoinCtx out: struct libnet_JoinCtx account_name

Client's credentials have been revoked .. Means the Active Directory account to which the keytab is related has been disabled, locked, expired, or deleted. Thats the first thing that needs to be verified. Also the bind config. If its an DC, in global options add: auth-nxdomain yes; Your DC = the Autoritive server of your domain.. ( a quick look ) Greetz, Louis >

On 10/12/2019 11:10, Sac Isilia wrote: > Hi Rowland, > > Please let me know what else I can try from my?side. We are stuck as > the server cant be joined to domain. > Sorry, I thought you had fixed this :-( You seem to be doing everything correctly, so it should work, but obviously, it isn't for you. Can I suggest you use Louis's repo: http://apt.van-belle.nl/ This will

Hi Rowland, I have done the edits as you suggested and ran again the script that you provided. Below is the output. Collected config --- 2019-12-04-11:46 ----------- Hostname: esmad1apl01 DNS Domain: emea.media.global.loc FQDN: esmad1apl01.emea.media.global.loc ipaddress: 10.34.54.152 ----------- Kerberos SRV _kerberos._tcp.emea.media.global.loc record verified ok, sample output: ;;

Hi Rowland, Below is the output that is produced. Collected config --- 2019-11-29-15:33 ----------- Hostname: esmad1apl01 DNS Domain: emea.media.global.loc FQDN: esmad1apl01.emea.media.global.loc ipaddress: 10.34.54.152 ----------- Kerberos SRV _kerberos._tcp.emea.media.global.loc record verified ok, sample output: ;; Truncated, retrying in TCP mode. Server: 10.10.136.85 Address:

Hai, Please read : https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member And adjust your smb.conf, start with a minimal smb.conf then join and then add optional extra settings. You current config is incomplete. I suggest you carefully read this chapter.: Choose backend for id mapping in winbindd > Host is not configured as a member server. > Invalid configuration.

Hi Rowland, Exactly. I commented the same line that you mentioned, but the same error persists. Regards Sachin Kumar On Fri, Nov 29, 2019 at 5:43 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 29/11/2019 11:58, Sac Isilia wrote: > > Hi Rowland, > > > > The line 60 contains "{" in the script. The exit 1 statement is on > > line

I am trying to reconfigure a samba server to use authentication from the University domain. * smbd seems to start OK * net ads testjoin is fine * net ads join -U xxUSERNAME createcomputer="xxCOMPUTER" fails with: Failed to join domain: failed to set machine spn: Constraint violation (where xxTEXT indicates redaction - sorry I'm not sure what's confidential and what isn't)

On Tue, 2019-11-26 at 14:26 +0000, S?rgio Basto wrote: > On Tue, 2019-11-26 at 15:07 +0100, L.P.H. van Belle via samba wrote: > > Hai, > > > > Please read : > > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member > > And adjust your smb.conf, start with a minimal smb.conf then join > > and > > then add optional extra settings. >

On 12/04/16 12:09, John Rowe wrote: > I am trying to reconfigure a samba server to use authentication from the University domain. > > * smbd seems to start OK > * net ads testjoin is fine > * net ads join -U xxUSERNAME createcomputer="xxCOMPUTER" fails with: > Failed to join domain: failed to set machine spn: Constraint violation > > (where xxTEXT indicates

Hi, I'm seeing this error on 3.0.24, 3.0.28, 3.0.32 and 3.2.6: Failed to join domain: failed to set machine spn: Constraint violation [Sanitised] First Run: net ads join createupn=HOST/FQDN@DOM.REALM.DOMAIN.COM createcomputer="OU/OU/OU/Services" -U username -d1 Enter username's password: [2008/12/11 17:02:32, 1] libnet/libnet_join.c:libnet_Join(1770) libnet_Join:

On Tue, 2019-11-26 at 15:07 +0100, L.P.H. van Belle via samba wrote: > Hai, > > Please read : > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member > And adjust your smb.conf, start with a minimal smb.conf then join and > then add optional extra settings. BTW , unfortunately I hadn't time to write about but see man idmap.ad , it have the right