Error with "samba-tool domain join"ERROR(runtime): uncaught exception - (-1073741790, 'Access denied')

[Andrew Bartlett]

On Mon, 2012-03-05 at 13:35 +0100, Manuel Alguacil Payán wrote:
> When I execute the following command:
> 
> root# ./samba-tool domain join my.domain DC -Uadministrator --realm=my.realm
> 
> 
> I get the following error:
> 
> DC -Uadministrator --realm=my.realm
> Finding a writeable DC for domain 'my.domain'
> Found DC myDC.my.domain
> Password for [my.domain\administrator]:
> Password for [my.domain\administrator]:
> workgroup is MYWRKGRP
> realm is my.realm
> checking sAMAccountName
> Adding CN=MYMACHINE,OU=Domain Controllers,DC=my.domain
> Adding
> CN=MYMACHINE,CN=Servers,CN=xxx,CN=Sites,CN=Configuration,DC=my.domain
> Adding CN=NTDS
> Settings,CN=MYMACHINE,CN=Servers,CN=xxx,CN=Sites,CN=Configuration,DC=my.domain*Join
> failed* - cleaning up
> checking sAMAccountName
> Deleted CN=MYMACHINE,OU=Domain Controllers,DC=my.domain
> Deleted
> CN=MYMACHINE,CN=Servers,CN=xxx,CN=Sites,CN=Configuration,DC=my.domain
> ERROR(runtime): uncaught exception - (-1073741790, '*Access denied*')
>   File
> "*/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/*__init__.py",
> line 162, in _run
>     return self.run(*args, **kwargs)
>   File
> "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/domain.py",
> line 180, in run
>     machinepass=machinepass)
>   File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
> 966, in join_DC
>     ctx.do_join()
>   File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
> 871, in do_join
>     ctx.join_add_objects()
>   File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
> 467, in join_add_objects
>     ctx.join_add_ntdsdsa()
>   File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
> 416, in join_add_ntdsdsa
>     ctx.DsAddEntry([rec])
>   File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
> 326, in DsAddEntry
>     ctx.drsuapi_connect()
>   File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line
> 305, in drsuapi_connect
>     (ctx.drsuapi_handle, ctx.bind_supported_extensions) =
> drs_utils.drs_DsBind(ctx.drsuapi)
>   File "/usr/local/samba/lib64/python2.6/site-packages/samba/drs_utils.py",
> line 144, in drs_DsBind
>     (info, handle) = drs.DsBind(misc.GUID(drsuapi.DRSUAPI_DS_BIND_GUID),
> bind_info)
> 
> 
> In earlier versions of SAMBA4alpha18 this worked fine, but since two weeks
> ago, I cannot join any SAMBA to the domain.
> 
> I got SAMBA from the GIT repository.

If you can reliably reproduce this, then running a git bisect to find
the problem commit would be very, very helpful.

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org