[Samba] Failed to set servicePrincipalNames error

[Rashid N. Achilov]

On Wednesday 06 December 2006 09:53, Jason Haar wrote:
> I am trying to add a (CentOS4.4) Samba-3.0.23d server to a AD Win2K3
> domain and the following error occurs
> 
> # /usr/kerberos/bin/kinit administrator at SUBDOM.DOMAIN
> #  net join
> Using short domain name -- SUBDOM
> Failed to set servicePrincipalNames. Please ensure that
> the DNS domain of this server matches the AD domain,
> Or rejoin with using Domain Admin credentials.
> Disabled account for 'SAMBA-4BCA' in realm 'SUBDOM.DOMAIN'
> ADS join did not work, falling back to RPC...
> Unable to find a suitable server
> Unable to find a suitable server

I had have this ugly trap some days ago. As workaround you can join in DCE-RPC 
mode:

net rpc join -U administrator -w DOMAIN
(here DOMAIN - is Pre-Windows 2000 domain name!)

and next testjoin:

net ads testjoin
Join is OK
:-)

Probably, your hostname is not equal your AD full name (i.e. box.hostname.com 
but AD named hostname.org). Today I'll put a big pile of debug messages to 
trace problem in source (it is net_ads.c in utils) and try to reach 'natural' 
solve...
-- 
   With Best Regards.
   Rashid N. Achilov (RNA1-RIPE), Web: http://www.askd.ru/~shelton
   OOO "ACK" telecommunications administrator, e-mail: achilov-rn [at] askd.ru
   PGP: 83 CD E2 A7 37 4A D5 81 D6 D6 52 BF C9 2F 85 AF 97 BE CB 0A