[Samba] Can't join windows 2008 AD with 3.0.30 "Failed tojoindomain: Improperly formed account"

Clayton Hill chill at powerfile.com
Thu Jun 12 18:53:53 GMT 2008


(Agustin, the reply is shortened, because the list wouldn't let me post
with another debug 10 output of the join , so don't reply to the last
email I sent.) 

 

 

!! LIST MODERATOR: please disregard my last message since this is
shortened significantly.

 

 

 

Agustin,

 

Thank you for your reply, I checked out what you said, and unfortunately
it is not the case.

 

For one thing, once you join a domain you cannot rename you computer, or
else your join is lost.

Assuming that is not what you meant, I renamed the server to "myserver"
and ran the same test again. (debug 10 output below)

I still didn't join, and I still got the improperly formed account name
error as before. Also there is nothing in my ADS in the "Computers"
container.

I will try with SUSE 10.3 and samba 3.0.30 next.


Any other ideas? 

Please help I really need this working with SUSE 10.1

 

Cheers,

-Clayton

 

 

Here is the output (shortened):

myserver:~ # net ads join -U administrator -d 10

  cli_session_setup_spnego: got a bad server principal, trying to guess
...

[2008/06/12 11:10:34, 5]
libads/kerberos.c:kerberos_get_default_realm_from_ccache(384)

  kerberos_get_default_realm_from_ccache: Trying to read krb5 cache:
MEMORY:cliconnect

[2008/06/12 11:10:34, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(909)

  cli_session_setup_spnego: guessed server
principal=win2k8datacenter$@QA2008.EDU

[2008/06/12 11:10:34, 2]
libsmb/cliconnect.c:cli_session_setup_kerberos(621)

  Doing kerberos session setup

[2008/06/12 11:10:34, 1] libsmb/clikrb5.c:ads_krb5_mk_req(602)

  ads_krb5_mk_req: krb5_get_credentials failed for
win2k8datacenter$@QA2008.EDU (Server not found in Kerberos database)

[2008/06/12 11:10:34, 1]
libsmb/cliconnect.c:cli_session_setup_kerberos(628)

  cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Server not
found in Kerberos database

[2008/06/12 11:10:34, 3] libsmb/cliconnect.c:cli_session_setup(1014)

  SPNEGO login failed: Server not found in Kerberos database

[2008/06/12 11:10:34, 1] libsmb/cliconnect.c:cli_full_connection(1658)

  failed session setup with NT_STATUS_INVALID_ACCOUNT_NAME

[2008/06/12 11:10:34, 1] utils/net.c:connect_to_ipc_krb5(294)

  Cannot connect to server using kerberos.  Error was
NT_STATUS_INVALID_ACCOUNT_NAME

[2008/06/12 11:10:34, 1] utils/net_ads.c:net_ads_join(1548)

  call of net_join_domain failed: Improperly formed account name

[2008/06/12 11:10:34, 10] intl/lang_tdb.c:lang_tdb_init(138)

  lang_tdb_init: /usr/lib64/samba/POSIX.msg: No such file or directory

Failed to join domain: Improperly formed account name

[2008/06/12 11:10:34, 2] utils/net.c:main(1066)

  return code = -1

myserver:~ #

 

 

 

 

 

 

------------------------------------------------------------------------
---------------------------------------

 

 

I had the same problem. I suggest renaming your SUSE box, if you look in
your ads under computers you will find your suse is already joined, you
may have to reboot your ads machine is order to see it. 

> Subject: RE: [Samba] Can't join windows 2008 AD with 3.0.30 "Failed to
joindomain: Improperly formed account name"
> Date: Wed, 11 Jun 2008 14:50:39 -0400
> From: chill at powerfile.com
> To: samba at lists.samba.org
> 
> Since I didn't get an answer, I am bumping this. 
> (sorry! I really need an answer for this...)
> 
> 
> Also here is more relevant info:
> OS: SUSE 10.1 x86_64
> 
> Samba:
> samba-3.0.30-0.1.112.x86_64
> samba-client-3.0.30-0.1.112.x86_64
> samba-winbind-3.0.30-0.1.112.x86_64
> 
> Kerberos: 
> krb5-1.5.1-23.x86_64
> krb5-client-1.5.1-23.x86_64
> 
>
------------------------------------------------------------------------
> --------------------
> 
> 
> 
> 
> 
> Hi folks,
> 
> My first post here after trolling for a while.
> 
> Here is the issue:
> I can't join a Windows 2008 Server Active Directory with 3.0.30.
> "Failed to join domain: Improperly formed account name"
> 
> 
> Judging from the release notes from 3.0.29 etc this was fixed...
> Am I incorrect in this assumption? Perhaps I have missed a new
> configuration parameter?
> 
> Are the fixes being implemented incrementally -- and if so, what
should
> I be looking for in future release notes that tells me this is
> completely finished and I can join my 2008 domain?
> 
> Regards,
> -Clayton H.
> 
> 
> 
> 
> Also, here is my debug level 10 output from a domain join:  ###(this
has been shortened too)
> 
> 
>
========================================================================
> ==========================================
> A3-A1000007:/etc/samba # net ads join -U administrator%password -d 10
> [2008/06/04 15:44:53, 5] lib/debug.c:debug_dump_status(391)
> > cli_session_setup_spnego: got a bad server principal, trying to
guess
> ...
> [2008/06/04 15:44:53, 5]
> libads/kerberos.c:kerberos_get_default_realm_from_ccache(384)
> kerberos_get_default_realm_from_ccache: Trying to read krb5 cache:
> MEMORY:cliconnect
> [2008/06/04 15:44:53, 3]
> libsmb/cliconnect.c:cli_session_setup_spnego(909)
> cli_session_setup_spnego: guessed server
> principal=win2k8datacenter$@QA2008.EDU
> [2008/06/04 15:44:53, 2]
> libsmb/cliconnect.c:cli_session_setup_kerberos(621)
> Doing kerberos session setup
> [2008/06/04 15:44:53, 1] libsmb/clikrb5.c:ads_krb5_mk_req(602)
> ads_krb5_mk_req: krb5_get_credentials failed for
> win2k8datacenter$@QA2008.EDU (Server not found in Kerberos database)
> [2008/06/04 15:44:53, 1]
> libsmb/cliconnect.c:cli_session_setup_kerberos(628)
> cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Server not
> found in Kerberos database
> [2008/06/04 15:44:53, 3] libsmb/cliconnect.c:cli_session_setup(1014)
> SPNEGO login failed: Server not found in Kerberos database
> [2008/06/04 15:44:53, 1] libsmb/cliconnect.c:cli_full_connection(1658)
> failed session setup with NT_STATUS_INVALID_ACCOUNT_NAME
> [2008/06/04 15:44:53, 1] utils/net.c:connect_to_ipc_krb5(294)
> Cannot connect to server using kerberos. Error was
> NT_STATUS_INVALID_ACCOUNT_NAME
> [2008/06/04 15:44:53, 1] utils/net_ads.c:net_ads_join(1548)
> call of net_join_domain failed: Improperly formed account name
> [2008/06/04 15:44:53, 10] intl/lang_tdb.c:lang_tdb_init(138)
> lang_tdb_init: /usr/lib64/samba/POSIX.msg: No such file or directory
> Failed to join domain: Improperly formed account name
> [2008/06/04 15:44:53, 2] utils/net.c:main(1066)
> return code = -1
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
> 
> No virus found in this incoming message.
> Checked by AVG. 
> Version: 8.0.100 / Virus Database: 269.24.6/1482 - Release Date:
> 6/4/2008 7:10 AM
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba

________________________________

Now you can invite friends from Facebook and other groups to join you on
Windows Live(tm) Messenger. Add them now!
<https://www.invite2messenger.net/im/?source=TXT_EML_WLH_AddNow_Now> 

No virus found in this incoming message.
Checked by AVG.
Version: 8.0.100 / Virus Database: 270.3.0/1499 - Release Date:
6/12/2008 7:13 AM



More information about the samba mailing list