"net ads join" problems

[Chris Garrison]

Hello,

I have two identical sets of PPC Linux servers, all on a single VLAN
that spans two sites via a Force 10 network.

One set of machines can join our campus ADS network without trouble.  On
the other site though, using the same smb.conf and network
configuration, the machines fail.

Well, not completely fail.  The ADS admin shows the machines actually
joining, and if I do a "net ads leave", they leave.  But the actual "net
ads join -U username" command shows this upon the first try:


hpss-gateb2:~# net ads join -U ecgarris
ecgarris's password:
[2006/11/01 13:39:28, 0] libads/ldap.c:ads_add_machine_acct(1512)
  Warning: ads_set_machine_sd: Unexpected information received

...and it hangs, waiting on a read from one of the ADS servers,
according to tcpdump.

If I break out of that and try again, it looks like this:

hpss-gateb2:~# net ads join -U ecgarris
ecgarris's password:
[2006/11/02 10:11:23, 0] libads/ldap.c:ads_add_machine_acct(1405)
  ads_add_machine_acct: Host account for hpss-gateb2 already exists -
modifying old account

...and still hangs for as long as I care to wait.

Linux distro is RHEL 4 with kernel 2.6.9-42.0.2.EL #1 SMP Thu Aug 17
17:35:58 EDT 2006 ppc64 ppc64 ppc64 GNU/Linux

Samba version is 3.0.10-1.4E.9

We put an XP machine on that network, and it was able to leave and
re-add itself to the ADS domain.

So I am baffled as to why this would happen.  If ALL of the machines
failed to join, I'd believe it was a misconfiguration of Samba or the
network, but these are only different by which physical switch they're
hooked up to, as far as I can tell.

I'm really frustrated and would be glad for any suggestions of things to
try to figure this out.

Thanks in advance,

Chris
-- 
Chris Garrison                  | Principal Mass Storage Specialist
ecgarris at iupui.edu              | Indiana University UITS - RAC - DSSG
W: 317-278-1207 M: 317-250-8649 | Jabber IM: ecgarris at itso.iu.edu