[Samba] Unable to Join Samba server to AD windows server 2008 R2

[Denis Cardon]

Hi Murthy,

> We are facing some issue While joining samba server to AD
>
> We have ClearCase VOB server on AIX 5.3 with TL 12  and SAMBA version 3.5.0  installed on Aix server. The AD server is Windows 2008 R2. We are unable to  Join  Samba server to AD .
>
> Command: net ads join createcomputer=<OU> -U <username>
>
> Please find the details smb.conf. Please  advice on resolving  this issue is highly appreciated.

You didn't provide your krb5.conf file. Does "kinit anyusername " works 
on command line? Is winbind running? does wbinfo -t or wbinfo -u runs 
fine? If those don't work properly yet, smbclient won't work anyway. You 
should check also your resolv.conf so that search domain and nameserver 
points properly to your MS AD server.

Cheers,


>
>
>
> Smb.conf
>
> global]
>
>     workgroup = Netbiosname
>     netbios name = hostname
>     realm = GLOBAL.XXX.ORG
>     encrypt passwords = yes
>     server string = Hostname
>     username map = /opt/pware64/lib/username.map
>     password server = xxx.xx.xx.xx
>     security = ADS
>     load printers = yes
>     local master = No
>     domain master = No
>
>     winbind separator = +
>     winbind cache time = 10
>     template shell = /bin/bash
>     template homedir = /home/%D/%U
>     idmap config * : range = 10000-20000
>
>     log level = 5
>     log file = /usr/local/samba/lib/log.%u
>     include = /opt/pware64/lib/smb.conf.%u
>
>     max log size = 1000
>
> [homes]
>     comment = Home Directories
>     browseable = no
>     writable = yes
>
> ; [netlogon]
> ;   comment = Network Logon Service
> ;   path = /usr/local/samba/lib/netlogon
> ;   guest ok = yes
> ;   writable = no
> ;   share modes = no
>
>
> ;[Profiles]
> ;    path = /usr/local/samba/profiles
> ;    browseable = no
> ;    guest ok = yes
>
>
> [printers]
>     comment = All Printers
>     path = /usr/spool/samba
>     browseable = no
>     guest ok = no
>     writable = no
>     printable = yes
>
>
> [vobs]
>     comment = Public Stuff
>     path = /vobs
>     browseable = yes
>     create mask = 0775
>     directory mask = 0775
> ;  printable = no
>     valid users = @ccuser
>     read only = No
>
>
> bash-4.0# smbclient -L global.tesco.org
> Enter root's password:
> Anonymous login successful
> Domain=[DomainnameL] OS=[Windows Server 2008 R2 Enterprise 7601 Service Pack 1] Server=[Windows Server 2008 R2 Enterprise 6.1]
>
>          Sharename       Type      Comment
>          ---------       ----      -------
> Error returning browse list: NT_STATUS_ACCESS_DENIED
> session request to GLOBAL.XXX.ORG failed (Called name not present)
> session request to GLOBAL failed (Called name not present)
> session request to *SMBSERVER failed (Called name not present)
> NetBIOS over TCP disabled -- no workgroup available
>
>
> Thanks and Regards
> Niranjan
>
> ________________________________
> This is a confidential email. Tesco may monitor and record all emails. The views expressed in this email are those of the sender and not Tesco.
>
> Tesco Stores Limited
> Company Number: 519500
> Registered in England
> Registered Office: Tesco House, Delamare Road, Cheshunt, Hertfordshire EN8 9SL
> VAT Registration Number: GB 220 4302 31
>


-- 
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil-it-systems.fr