[Samba] net ads join failed
Thomas Vito
shoktai at gmail.com
Thu Sep 4 13:44:04 GMT 2008
Hi,
I am trying to join a samba server to my AD directory but if fails:
[root at localhost postfix]# net ads join -U apacci at ACME
apacci at ACNEU's password:
[2008/09/04 15:12:45, 0] libads/kerberos.c:ads_kinit_password(228)
kerberos_kinit_password apacci at ACME failed: Cannot resolve network address
for KDC in requested realm
Failed to join domain: Undetermined error
[root at localhost postfix]# net ads join -U apacci at EU.ACME.COM
apacci at EU.ACME.COM's password:
Using short domain name -- ACME
Failed to set servicePrincipalNames. Please ensure that
the DNS domain of this server matches the AD domain,
Or rejoin with using Domain Admin credentials.
Deleted account for 'AMSDEV-DV10' in realm 'EU.ACME.COM'
Failed to join domain: Type or value exists
There is no computer account named amsdev-dv10 in my directory.
kinit doesn't return anything
[root at localhost postfix]# kinit apacci
Password for apacci at EU.ACME.COM:
My resolv.conf is ok.I can ping and resolve hosts in my AD. My /etc/host
file is basic:
::1 localhost.localdomain localhost amsdev-dv10
The username is domain admin.
My krb5.conf is as follow:
[libdefaults]
default_realm = EU.ACME.COM
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
forwardable = yes
[realms]
EU.ACME.COM = {
kdc = amsterdam-dc02.eu.acme.com
kdc = amsterdam-dc01.eu.acme.com
admin_server = amsterdam-dc02.eu.acme.com
master_kdc = amsterdam-dc02.eu.acme.com
default_domain = eu.acme.com
}
[domain_realm]
eu.acme.com = EU.ACME.COM
.eu.acme.com = EU.ACME.COM
.acme.com = EU.ACME.COM
acme.com = EU.ACME.COM
[kdc]
profile = /etc/kdc.conf
smb.conf
[global]
workgroup = ACME
password server = 10.130.12.100
realm = EU.ACME.COM
security = ADS
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
winbind separator = +
template shell = /bin/false
winbind use default domain = true
winbind offline logon = false
server string = Samba Server Version %v
passdb backend = tdbsam
preferred master = No
wins server = 10.130.10.100
ldap ssl = no
winbind enum users = Yes
winbind enum groups = Yes
[homes]
comment = Home Directories
read only = No
browseable = No
More information about the samba
mailing list