[Samba] Failed to join domain: failed to set machine spn: Constraint violation

Alex Green Alex.Green at db.com
Thu Dec 11 17:08:46 GMT 2008


Hi,

I'm seeing this error on 3.0.24, 3.0.28, 3.0.32 and 3.2.6:

Failed to join domain: failed to set machine spn: Constraint violation

[Sanitised]

First Run:

net ads join createupn=HOST/FQDN at DOM.REALM.DOMAIN.COM createcomputer="OU/OU/OU/Services" -U username -d1
Enter username's password:
[2008/12/11 17:02:32,  1] libnet/libnet_join.c:libnet_Join(1770)
  libnet_Join:
      libnet_JoinCtx: struct libnet_JoinCtx
          in: struct libnet_JoinCtx
              dc_name                  : NULL
              machine_name             : 'HOSTNAME'
              domain_name              : *
                  domain_name              : 'DOM.REALM.DOMAIN.COM'
              account_ou               : 'OU/OU/OU/Services'
              admin_account            : 'username'
              admin_password           : *
              machine_password         : NULL
              join_flags               : 0x00000023 (35)
                     0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
                     0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
                     0: WKSSVC_JOIN_FLAGS_DEFER_SPN
                     0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
                     0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
                     1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
                     0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
                     0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
                     1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
                     1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
              os_version               : NULL
              os_name                  : NULL
              create_upn               : 0x01 (1)
              upn                      : 'HOST/FQDN at DOM.REALM.DOMAIN.COM'
              modify_config            : 0x00 (0)
              ads                      : NULL
              debug                    : 0x01 (1)
              secure_channel_type      : SEC_CHAN_WKSTA (2)
[2008/12/11 17:02:33,  1] libnet/libnet_join.c:libnet_join_precreate_machine_acct(235)
  machine account creation created
[2008/12/11 17:02:33,  1] libnet/libnet_join.c:libnet_Join(1801)
  libnet_Join:
      libnet_JoinCtx: struct libnet_JoinCtx
          out: struct libnet_JoinCtx
              account_name             : NULL
              netbios_domain_name      : 'DOM'
              dns_domain_name          : 'DOM.REALM.DOMAIN.COM'
              dn                       : 'CN=HOSTNAME,OU=Services,OU=OU,OU=OU,OU=OU,DC=DOM,DC=REALM,DC=DOMAIN,DC=com'
              domain_sid               : *
                  domain_sid               : S-1-5-21-1606980848-1965331169-1417001333
              modified_config          : 0x00 (0)
              error_string             : 'failed to set machine spn: Constraint violation'
              domain_is_ad             : 0x01 (1)
              result                   : WERR_GENERAL_FAILURE
Failed to join domain: failed to set machine spn: Constraint violation

SPN Created - but errors!!!

Second Run:

net ads join createupn=HOST/FQDN at DOM.REALM.DOMAIN.COM createcomputer="OU/OU/OU/Services" -U username -d1
Enter username's password:
[2008/12/11 16:54:40,  1] libnet/libnet_join.c:libnet_Join(1770)
  libnet_Join:
      libnet_JoinCtx: struct libnet_JoinCtx
          in: struct libnet_JoinCtx
              dc_name                  : NULL
              machine_name             : 'HOSTNAME'
              domain_name              : *
                  domain_name              : 'DOM.REALM.DOMAIN.COM'
              account_ou               : 'OU/OU/OU/Services'
              admin_account            : 'username'
              admin_password           : *
              machine_password         : NULL
              join_flags               : 0x00000023 (35)
                     0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
                     0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
                     0: WKSSVC_JOIN_FLAGS_DEFER_SPN
                     0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
                     0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
                     1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
                     0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
                     0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
                     1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
                     1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
              os_version               : NULL
              os_name                  : NULL
              create_upn               : 0x01 (1)
              upn                      : 'HOST/FQDN at DOM.REALM.DOMAIN.COM'
              modify_config            : 0x00 (0)
              ads                      : NULL
              debug                    : 0x01 (1)
              secure_channel_type      : SEC_CHAN_WKSTA (2)
[2008/12/11 16:54:41,  1] libnet/libnet_join.c:libnet_join_precreate_machine_acct(258)
  The machine account already exists in the specified OU.
[2008/12/11 16:54:41,  1] libnet/libnet_join.c:libnet_Join(1801)
  libnet_Join:
      libnet_JoinCtx: struct libnet_JoinCtx
          out: struct libnet_JoinCtx
              account_name             : NULL
              netbios_domain_name      : 'DOM'
              dns_domain_name          : 'DOM.REALM.DOMAIN.COM'
              dn                       : 'CN=HOSTNAME,OU=Services,OU=OU,OU=OU,OU=OU,DC=DOM,DC=REALM,DC=DOMAIN,DC=com'
              domain_sid               : *
                  domain_sid               : S-1-5-21-1606980848-1965331169-1417001333
              modified_config          : 0x00 (0)
              error_string             : 'failed to set machine spn: Constraint violation'
              domain_is_ad             : 0x01 (1)
              result                   : WERR_GENERAL_FAILURE
Failed to join domain: failed to set machine spn: Constraint violation



Is this a bug?


Thanks,
Alex





More information about the samba mailing list