[Samba] Failed to join domain: failed to find DC for domain...

[Rob Campbell]

Did you turn off the Firewall ?
- I did turn it off on both.

It looks like something is getting in the way, either that or something
is set up incorrectly.

I know you said that you are using Debian, but what version and what
version of Samba ?
- Debian 12. Samba = 4.17.10-Debian
Are you using Bind9 on the DC or the internal dns server ?
- I am using internal dns server but I did install bind9 however, I
disabled the service.
netstat -tulpn | grep :53
tcp        0      0 10.0.0.10:53            0.0.0.0:*               LISTEN
     1757540/samba: task
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN
     1757540/samba: task
tcp6       0      0 2600:4040:4661:9a00::53 :::*                    LISTEN
     1757540/samba: task
tcp6       0      0 2600:4040:4661:9a00::53 :::*                    LISTEN
     1757540/samba: task
tcp6       0      0 ::1:53                  :::*                    LISTEN
     1757540/samba: task
tcp6       0      0 2600:4040:4661:9a00::53 :::*                    LISTEN
     1757540/samba: task
udp        0      0 10.0.0.10:53            0.0.0.0:*
    1757540/samba: task
udp        0      0 127.0.0.1:53            0.0.0.0:*
    1757540/samba: task
udp        0      0 224.0.0.251:5353        0.0.0.0:*
    8990/chrome
udp        0      0 0.0.0.0:5353            0.0.0.0:*
    1580/avahi-daemon:
udp6       0      0 2600:4040:4661:9a00::53 :::*
     1757540/samba: task
udp6       0      0 2600:4040:4661:9a00::53 :::*
     1757540/samba: task
udp6       0      0 2600:4040:4661:9a00::53 :::*
     1757540/samba: task
udp6       0      0 ::1:53                  :::*
     1757540/samba: task
udp6       0      0 :::5353                 :::*
     1580/avahi-daemon:


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In all things, Be Intentional.


On Sat, Sep 9, 2023 at 3:24 PM Rowland Penny via samba <
samba at lists.samba.org> wrote:

> On Sat, 9 Sep 2023 15:11:20 -0400
> Rob Campbell via samba <samba at lists.samba.org> wrote:
>
> > [Sat Sep 09 15:09:09] [root at D01~/.bin$]net ads join -U administrator
> > Password for [HOME\administrator]:
> > get_kdc_ip_string: get_kdc_list (site-less) fail
> > NT_STATUS_NO_LOGON_SERVERS kerberos_kinit_password
> > administrator at HOME.ROB-CAMPBELL.LAN failed: Cannot contact any KDC
> > for requested realm kerberos_kinit_password
> > D01$@HOME.ROB-CAMPBELL.LAN failed: Cannot contact any KDC for
> > requested realm Using short domain name -- HOME
> > Joined 'D01' to dns domain 'home.rob-campbell.lan'
> > kerberos_kinit_password D01$@HOME.ROB-CAMPBELL.LAN failed: Cannot
> > contact any KDC for requested realm
> > DNS update failed: kinit failed: Cannot contact any KDC for requested
> > realm
> >
> > So something is being blocked but I'm not sure what because I opened
> > the suggested ports.  Still can't contact any KDC.
> >
> >
>
> Did you turn off the Firewall ?
>
> It looks like something is getting in the way, either that or something
> is set up incorrectly.
>
> I know you said that you are using Debian, but what version and what
> version of Samba ?
> Are you using Bind9 on the DC or the internal dns server ?
>
> Rowland
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>