error with configuring subdomain
Sergey Leschenko
ser at aska.com.ua
Thu Oct 4 01:21:41 MDT 2012
Hello, I want to get the configuration of the central tree, the branches
of which are replicated in the Multi-master mode with his subordinates
DCs and back. For example:
There is a central dc.domain.local, which is the main DCs for the
company (realm DOMAIN.LOCAL).
There dc.kiev.domain.local (realm KIEV.DOMAIN.LOCAL),
dc.lviv.domain.local (realm LVIV.DOMAIN.LOCAL), which are the DCs for
its branches.
I want that when changes are made to kiev.domain.local, so they
replicated to DN: dc=kiev,dc=domain,dc=local on the main DC dc.domain.local.
I thought that this should be used:
samba-tool domain join domain.local SUBDOMAIN -Uadministrator
-realm=DOMAIN.LOCAL -parent-domain=domain.local
but got an error:
lpcfg_load: refreshing parameters from /opt/samba/etc/smb.conf
params.c:pm_process() - Processing configuration file
"/opt/samba/etc/smb.conf"
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'sasl-DIGEST-MD5' registered
GENSEC backend 'schannel' registered
GENSEC backend 'spnego' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
Using binding
ncacn_ip_tcp:195834b8-42cb-45f3-97af-5a311a82736d._msdcs.domain.local[,sign]
Server
host/195834B8-42CB-45F3-97AF-5A311A82736D._MSDCS.DOMAIN.LOCAL at DOMAIN.LOCAL
is not registered with our KDC: Miscellaneous failure (see text):
Server
(host/195834B8-42CB-45F3-97AF-5A311A82736D._MSDCS.DOMAIN.LOCAL at DOMAIN.LOCAL)
unknown
SPNEGO(gssapi_krb5) creating NEG_TOKEN_INIT failed:
NT_STATUS_INVALID_PARAMETER
Got challenge flags:
Got NTLMSSP neg_flags=0x60898215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60088215
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60088215
Using binding
ncacn_ip_tcp:195834b8-42cb-45f3-97af-5a311a82736d._msdcs.domain.local[,sign]
Server
host/195834B8-42CB-45F3-97AF-5A311A82736D._MSDCS.DOMAIN.LOCAL at DOMAIN.LOCAL
is not registered with our KDC: Miscellaneous failure (see text):
Server
(host/195834B8-42CB-45F3-97AF-5A311A82736D._MSDCS.DOMAIN.LOCAL at DOMAIN.LOCAL)
unknown
SPNEGO(gssapi_krb5) creating NEG_TOKEN_INIT failed:
NT_STATUS_INVALID_PARAMETER
Got challenge flags:
Got NTLMSSP neg_flags=0x60898215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60088215
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60088215
ERROR(ldb): uncaught exception - LDAP error 68 LDAP_ENTRY_ALREADY_EXISTS
- <Entry
CN=DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
already exists> <>
File
"/opt/samba/lib/python2.6/site-packages/samba/netcmd/__init__.py", line
160, in _run
return self.run(*args, **kwargs)
File "/opt/samba/lib/python2.6/site-packages/samba/netcmd/domain.py",
line 270, in run
machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
File "/opt/samba/lib/python2.6/site-packages/samba/join.py", line
1122, in join_subdomain
ctx.do_join()
File "/opt/samba/lib/python2.6/site-packages/samba/join.py", line
982, in do_join
ctx.join_add_objects()
File "/opt/samba/lib/python2.6/site-packages/samba/join.py", line
506, in join_add_objects
ctx.samdb.add(rec)
Finding a writeable DC for domain 'domain.local'
Found DC dc.domain.local
Reconnecting to naming master
195834b8-42cb-45f3-97af-5a311a82736d._msdcs.domain.local
checking sAMAccountName
Adding
CN=DC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
Join failed - cleaning up
checking sAMAccountName
Say configuration I want to get possible?
More information about the samba-technical
mailing list