[Samba] Failed to join domain: failed to set machine spn: Constraint violation

Gerald (Jerry) Carter jerry at samba.org
Mon Dec 15 16:49:35 GMT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alex Green wrote:
> Found the issue:
> 
> Validate Write for DNS and SPN were not set.
> 
> However it now fails on DNS Update; I'm presuming 
> this is because we're not using AD Integrated DNS (MS-DNS).
> Could this not be an option flag to disable DNS updates
> in this scenario?

Those attributes and perms have nothing to do with DNS.  You
need full access rights to the computer object to join a machine
with a DNS name outside of the AD realm name.  That's what the
"validated write" means.





cheers, jerry
- --
=====================================================================
Samba                                    ------- http://www.samba.org
Likewise Software          ---------  http://www.likewisesoftware.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJRoS5IR7qMdg1EfYRAq/nAKDa3GwgMI1SzbyuU6UBAKR/r2X/7ACdFAaj
Y5yzmHfOBD89pu0YXA5Y3fg=
=J1Lb
-----END PGP SIGNATURE-----


More information about the samba mailing list