[Samba] unable to join w2k3 SP1 to samba 3 domain.

Tue Sep 8 17:21:48 MDT 2009

>> I've been running Samba 3.0.28a on Ubuntu for a few months.
>> One of my machines is running Windows Server 2008 SP2.
>> This machine joined my Samba domain just fine months ago,
>> however last week I reinstalled the PDC with Ubuntu and Samba.
>>
>> Now I'm unable to rejoin my Windows Server 2008 machine to Samba.
>> When I try to join the domain I get this error:
>>
>> "The following error occurred attempting to join the domain DEVNET:
>> The specified account already exists."
>
> Just a guess, but have you deleted the computer object from AD before
> re-adding it?  Or are you using an account with write access to the
> object?  If the PC already exists in AD you will need certain privileges
> to overwrite it.
>
> Cheers,
> Adam.
>
>

Hi Adam,
I'm also under the impression that "something" needs to be removed
from the system.
Could you please elaborate on how to remove the machine from the AD? Thx!
(I've always thought that the term "Active Directory" isn't relevant
to a Samba PDC,
since Samba-3 only functions an MS Windows NT4-style domain controller.)

On the other hand, I guess I've found some very interesting stuff in
C:\windows\debug\netsetup.log
It looks like a complete log of the joining process on the Windows server.
Now I'm hoping for someone to make anything out of it :)
Thanks!

09/09/2009 00:51:52:645
-----------------------------------------------------------------
09/09/2009 00:51:52:645 NetpValidateName: checking to see if
'DEVSRV01' is valid as type 1 name
09/09/2009 00:51:52:645 NetpCheckNetBiosNameNotInUse for 'DEVSRV01'
[MACHINE] returned 0x0
09/09/2009 00:51:52:645 NetpValidateName: name 'DEVSRV01' is valid for type 1
09/09/2009 00:51:52:646
-----------------------------------------------------------------
09/09/2009 00:51:52:646 NetpValidateName: checking to see if
'DEVSRV01' is valid as type 5 name
09/09/2009 00:51:52:646 NetpValidateName: name 'DEVSRV01' is valid for type 5
09/09/2009 00:51:52:647
-----------------------------------------------------------------
09/09/2009 00:51:52:647 NetpValidateName: checking to see if 'DEVNET'
is valid as type 3 name
09/09/2009 00:51:52:751 NetpCheckDomainNameIsValid [ Exists ] for
'DEVNET' returned 0x0
09/09/2009 00:51:52:751 NetpValidateName: name 'DEVNET' is valid for type 3
09/09/2009 00:51:58:450
-----------------------------------------------------------------
09/09/2009 00:51:58:450 NetpDoDomainJoin
09/09/2009 00:51:58:451 NetpMachineValidToJoin: 'DEVSRV01'
09/09/2009 00:51:58:451 	OS Version: 6.0
09/09/2009 00:51:58:451 	Build number: 6002
09/09/2009 00:51:58:451 	ServicePack: Service Pack 2
09/09/2009 00:51:58:451 	SKU: Windows Server® 2008 Standard
09/09/2009 00:51:58:451 NetpDomainJoinLicensingCheck:
ulLicenseValue=1, Status: 0x0
09/09/2009 00:51:58:451 NetpGetLsaPrimaryDomain: status: 0x0
09/09/2009 00:51:58:452 NetpMachineValidToJoin: status: 0x0
09/09/2009 00:51:58:452 NetpJoinDomain
09/09/2009 00:51:58:452 	Machine: DEVSRV01
09/09/2009 00:51:58:452 	Domain: DEVNET
09/09/2009 00:51:58:452 	MachineAccountOU: (NULL)
09/09/2009 00:51:58:452 	Account: DEVNET\devadm
09/09/2009 00:51:58:452 	Options: 0x25
09/09/2009 00:51:58:452 NetpLoadParameters: loading registry parameters...
09/09/2009 00:51:58:452 NetpLoadParameters: DNSNameResolutionRequired
not found, defaulting to '1' 0x2
09/09/2009 00:51:58:452 NetpLoadParameters: status: 0x2
09/09/2009 00:51:58:452 NetpValidateName: checking to see if 'DEVNET'
is valid as type 3 name
09/09/2009 00:51:58:556 NetpCheckDomainNameIsValid [ Exists ] for
'DEVNET' returned 0x0
09/09/2009 00:51:58:556 NetpValidateName: name 'DEVNET' is valid for type 3
09/09/2009 00:51:58:556 NetpDsGetDcName: trying to find DC in domain
'DEVNET', flags: 0x40001010
09/09/2009 00:51:59:274 NetpDsGetDcName: found DC '\\PDC' in the
specified domain
09/09/2009 00:51:59:350 NetpJoinDomain: status of connecting to dc '\\PDC': 0x0
09/09/2009 00:51:59:354 NetpGetLsaPrimaryDomain: status: 0x0
09/09/2009 00:51:59:354 NetpGetNt4RefusePasswordChangeStatus: trying
to read from '\\PDC'
09/09/2009 00:51:59:363 NetpGetNt4RefusePasswordChangeStatus:
RefusePasswordChange == 0
09/09/2009 00:51:59:365 NetpLsaOpenSecret: status: 0xc0000034
09/09/2009 00:51:59:365 NetpGetLsaPrimaryDomain: status: 0x0
09/09/2009 00:51:59:365 NetpLsaOpenSecret: status: 0xc0000034
09/09/2009 00:51:59:416 Failed to validate machine account for
DEVSRV01 against \\PDC: 0xc002002e
09/09/2009 00:51:59:416 NetpJoinDomain: status of validating account
using NL SC: 0x6d1
09/09/2009 00:51:59:416 NetpJoinDomain: initiaing a rollback due to
earlier errors
09/09/2009 00:51:59:416 NetpLsaOpenSecret: status: 0x0
09/09/2009 00:51:59:446 NetpJoinDomain: rollback: status of deleting secret: 0x0
09/09/2009 00:51:59:448 NetpJoinDomain: status of disconnecting from
'\\PDC': 0x0
09/09/2009 00:51:59:448 NetpDoDomainJoin: status: 0x6d1
09/09/2009 00:51:59:458
-----------------------------------------------------------------
09/09/2009 00:51:59:458 NetpDoDomainJoin
09/09/2009 00:51:59:458 NetpMachineValidToJoin: 'DEVSRV01'
09/09/2009 00:51:59:458 	OS Version: 6.0
09/09/2009 00:51:59:458 	Build number: 6002
09/09/2009 00:51:59:458 	ServicePack: Service Pack 2
09/09/2009 00:51:59:458 	SKU: Windows Server® 2008 Standard
09/09/2009 00:51:59:458 NetpDomainJoinLicensingCheck:
ulLicenseValue=1, Status: 0x0
09/09/2009 00:51:59:459 NetpGetLsaPrimaryDomain: status: 0x0
09/09/2009 00:51:59:459 NetpMachineValidToJoin: status: 0x0
09/09/2009 00:51:59:459 NetpJoinDomain
09/09/2009 00:51:59:459 	Machine: DEVSRV01
09/09/2009 00:51:59:459 	Domain: DEVNET
09/09/2009 00:51:59:459 	MachineAccountOU: (NULL)
09/09/2009 00:51:59:459 	Account: DEVNET\devadm
09/09/2009 00:51:59:459 	Options: 0x27
09/09/2009 00:51:59:459 NetpLoadParameters: loading registry parameters...
09/09/2009 00:51:59:459 NetpLoadParameters: DNSNameResolutionRequired
not found, defaulting to '1' 0x2
09/09/2009 00:51:59:459 NetpLoadParameters: status: 0x2
09/09/2009 00:51:59:459 NetpValidateName: checking to see if 'DEVNET'
is valid as type 3 name
09/09/2009 00:51:59:563 NetpCheckDomainNameIsValid [ Exists ] for
'DEVNET' returned 0x0
09/09/2009 00:51:59:563 NetpValidateName: name 'DEVNET' is valid for type 3
09/09/2009 00:51:59:563 NetpDsGetDcName: trying to find DC in domain
'DEVNET', flags: 0x40001010
09/09/2009 00:51:59:563 NetpDsGetDcName: found DC '\\PDC' in the
specified domain
09/09/2009 00:51:59:564 NetpJoinDomain: status of connecting to dc '\\PDC': 0x0
09/09/2009 00:51:59:567 NetpGetLsaPrimaryDomain: status: 0x0
09/09/2009 00:51:59:567 NetpGetNt4RefusePasswordChangeStatus: trying
to read from '\\PDC'
09/09/2009 00:51:59:576 NetpGetNt4RefusePasswordChangeStatus:
RefusePasswordChange == 0
09/09/2009 00:51:59:579 NetpLsaOpenSecret: status: 0xc0000034
09/09/2009 00:51:59:579 NetpGetLsaPrimaryDomain: status: 0x0
09/09/2009 00:51:59:579 NetpLsaOpenSecret: status: 0xc0000034
09/09/2009 00:51:59:650 NetpManageMachineAccountWithSid: NetUserAdd on
'\\PDC' for 'DEVSRV01$' failed: 0x8b0
09/09/2009 00:51:59:655 NetpSetMachineAccountPasswordAndTypeEx: Broken
account type 0x11 -- error out
09/09/2009 00:51:59:657 NetpManageMachineAccountWithSid: status of
attempting to set password on '\\PDC' for 'DEVSRV01$': 0x524
09/09/2009 00:51:59:657 NetpJoinDomain: status of creating account: 0x524
09/09/2009 00:51:59:657 NetpJoinDomain: initiaing a rollback due to
earlier errors
09/09/2009 00:51:59:657 NetpLsaOpenSecret: status: 0x0
09/09/2009 00:51:59:659 NetpJoinDomain: rollback: status of deleting secret: 0x0
09/09/2009 00:51:59:660 NetpJoinDomain: status of disconnecting from
'\\PDC': 0x0
09/09/2009 00:51:59:660 NetpDoDomainJoin: status: 0x524