[Samba] Samba 3.0.0 can't join ADS domain

Joey Howell jhowell_samba at yahoo.com
Fri Nov 7 16:07:23 GMT 2003


My apologies to anyone else who might have replied to
the original post.  After posting I got heavily
spammed with bogus M$ Support emails that filled up my
mailbox.


--- Tom Dickson <tdickson at inostor.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> net ads join doesn't say anything sometimes.
> 
> Does kinit ADMINISTRATOR at REALM work correctly?
Yes.

> 
> If it does, try bumping up the log level to 5 or 10
> and try again.
Ran at level 5.  Among the more interesting messages
is

[2003/11/07 09:35:20, 3]
libads/ldap.c:ads_connect(218)
  Connected to LDAP server 10.4.1.13
[2003/11/07 09:35:20, 1]
libads/ldap.c:ads_connect(222)
  Failed to get ldap server info
[2003/11/07 09:35:20, 5]
passdb/secrets.c:secrets_fetch_trust_account_password(262)
  secrets_fetch failed!
[2003/11/07 09:35:20, 4]
libsmb/namequery.c:get_dc_list(1350)
  get_dc_list: returning 1 ip addresses in an ordered
list
[2003/11/07 09:35:20, 4]
libsmb/namequery.c:get_dc_list(1351)
  get_dc_list: 10.4.1.13:389
[2003/11/07 09:35:20, 5]
libsmb/namecache.c:namecache_status_fetch(308)
  namecache_status_fetch: no entry for
NBT/MYWKGRP.MYDOMAIN.COM#1C.20.10.4.1.13 found.
[2003/11/07 09:35:20, 5] libsmb/nmblib.c:send_udp(744)
  Sending a packet of len 50 to (10.4.1.13) on port
137
[2003/11/07 09:35:22, 5] libsmb/nmblib.c:send_udp(744)
  Sending a packet of len 50 to (10.4.1.13) on port
137
[2003/11/07 09:35:24, 5]
nsswitch/winbindd_cm.c:cm_check_for_native_mode_win2k(424)
  cm_check_for_native_mode_win2k: Could not open a
connection to MYWKGRP.MYDOMAIN.COM for PIPE_LSARPC
(NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND)
[2003/11/07 09:35:24, 3]
nsswitch/winbindd_util.c:add_trusted_domain(142)
  add_trusted_domain: MYWKGRP.MYDOMAIN.COM is a mixed
(or NT4) mode domain  (Editor's note: the domain used
to be mixed-mode but has since been converted to
native mode.  Don't know why this shows up this way.)
[2003/11/07 09:35:24, 1]
nsswitch/winbindd_util.c:add_trusted_domain(149)
  Added domain MYWKGRP MYWKGRP.MYDOMAIN.COM
[2003/11/07 09:35:24, 3]
nsswitch/winbindd_ads.c:alternate_name(931)
  ads: alternate_name

> 
> Also, you should be able to ping the FQDN of the ADS
> server, etc.
Yes.
> 
> Also, you may want to try with the newer krb5 libs
> (1.3.1) as there are
> some issues with the older ones.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.2-nr2 (Windows 2000)
> Comment: Using GnuPG with Mozilla -
> http://enigmail.mozdev.org
> 
>
iD8DBQE/qBQJ2dxAfYNwANIRAnwOAJ4+UNUfXAtF1gsdalrfOmpDOCAtuwCfTDkS
> RhwJR+kmyUz+cY2THsR1Ces=
> =WVlD
> -----END PGP SIGNATURE-----
> 
> -- 
> To unsubscribe from this list go to the following
> URL and read the
> instructions: 
http://lists.samba.org/mailman/listinfo/samba


__________________________________
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard
http://antispam.yahoo.com/whatsnewfree



More information about the samba mailing list