[Samba] Samba 3.0.0 can't join ADS domain
Joey Howell
jhowell_samba at yahoo.com
Fri Nov 7 16:07:23 GMT 2003
My apologies to anyone else who might have replied to
the original post. After posting I got heavily
spammed with bogus M$ Support emails that filled up my
mailbox.
--- Tom Dickson <tdickson at inostor.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> net ads join doesn't say anything sometimes.
>
> Does kinit ADMINISTRATOR at REALM work correctly?
Yes.
>
> If it does, try bumping up the log level to 5 or 10
> and try again.
Ran at level 5. Among the more interesting messages
is
[2003/11/07 09:35:20, 3]
libads/ldap.c:ads_connect(218)
Connected to LDAP server 10.4.1.13
[2003/11/07 09:35:20, 1]
libads/ldap.c:ads_connect(222)
Failed to get ldap server info
[2003/11/07 09:35:20, 5]
passdb/secrets.c:secrets_fetch_trust_account_password(262)
secrets_fetch failed!
[2003/11/07 09:35:20, 4]
libsmb/namequery.c:get_dc_list(1350)
get_dc_list: returning 1 ip addresses in an ordered
list
[2003/11/07 09:35:20, 4]
libsmb/namequery.c:get_dc_list(1351)
get_dc_list: 10.4.1.13:389
[2003/11/07 09:35:20, 5]
libsmb/namecache.c:namecache_status_fetch(308)
namecache_status_fetch: no entry for
NBT/MYWKGRP.MYDOMAIN.COM#1C.20.10.4.1.13 found.
[2003/11/07 09:35:20, 5] libsmb/nmblib.c:send_udp(744)
Sending a packet of len 50 to (10.4.1.13) on port
137
[2003/11/07 09:35:22, 5] libsmb/nmblib.c:send_udp(744)
Sending a packet of len 50 to (10.4.1.13) on port
137
[2003/11/07 09:35:24, 5]
nsswitch/winbindd_cm.c:cm_check_for_native_mode_win2k(424)
cm_check_for_native_mode_win2k: Could not open a
connection to MYWKGRP.MYDOMAIN.COM for PIPE_LSARPC
(NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND)
[2003/11/07 09:35:24, 3]
nsswitch/winbindd_util.c:add_trusted_domain(142)
add_trusted_domain: MYWKGRP.MYDOMAIN.COM is a mixed
(or NT4) mode domain (Editor's note: the domain used
to be mixed-mode but has since been converted to
native mode. Don't know why this shows up this way.)
[2003/11/07 09:35:24, 1]
nsswitch/winbindd_util.c:add_trusted_domain(149)
Added domain MYWKGRP MYWKGRP.MYDOMAIN.COM
[2003/11/07 09:35:24, 3]
nsswitch/winbindd_ads.c:alternate_name(931)
ads: alternate_name
>
> Also, you should be able to ping the FQDN of the ADS
> server, etc.
Yes.
>
> Also, you may want to try with the newer krb5 libs
> (1.3.1) as there are
> some issues with the older ones.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.2-nr2 (Windows 2000)
> Comment: Using GnuPG with Mozilla -
> http://enigmail.mozdev.org
>
>
iD8DBQE/qBQJ2dxAfYNwANIRAnwOAJ4+UNUfXAtF1gsdalrfOmpDOCAtuwCfTDkS
> RhwJR+kmyUz+cY2THsR1Ces=
> =WVlD
> -----END PGP SIGNATURE-----
>
> --
> To unsubscribe from this list go to the following
> URL and read the
> instructions:
http://lists.samba.org/mailman/listinfo/samba
__________________________________
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard
http://antispam.yahoo.com/whatsnewfree
More information about the samba
mailing list