[Samba] unable to join to a Samba4 domain

[Hoover, Tony]

Try adding these SRV entries to your DNS server:
---
_ldap._tcp.samba4.my.domain.   IN    SRV    0    0    389
ldapserver.samba4.my.domain.
_ldap._tcp.dc._msdcs.samba4.my.domain.    IN    SRV    0    0    389
ldapserver.samba4.my.domain.
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba4.my.domain.
IN    SRV    0    0    389    ldapserver.samba4.my.domain.
_kerberos._tcp.samba4.my.domain.    IN    SRV    0    0    88
kerberosserver.samba4.my.domain.
_kerberos._tcp.dc._msdcs.samba4.my.domain.    IN    SRV    0    0    88
kerberosserver.samba4.my.domain.
---
Where ldapserver.samba4.my.domain is the FQDN of the LDAP server in your
domain (samba4 domain controller?), and kerberosserver.samba4.my.domain.
is the FQDN of your kerberos server (also your samba4 domain
controller?)

If you have multiple domain controllers, you will need to have the full
set of SRV records point to the each of the DCs.

Good luck.

T


-- 

------------------------------------------------------------------------ 
Tony Hoover, Network Administrator 
KSU - Salina, College of Technology and Aviation 
(785) 826-2660

"Don't Blend in..." 
------------------------------------------------------------------------ 
 

On Thu, 2010-05-20 at 09:00 -0500, Tomasz Chmielewski wrote:

> I'm trying to join a Windows 2008 to a Samba4 domain.
> 
> I'm able to ping Samba4 or browse its network shares.
> 
> 
> Unfortunately, I can't join Windows 2008 to this Samba4 domain - I'm
> not 
> even asked for Administrator password.
> 
> Windows 2008 errors with the below message, which roughly translates
> to:
> 
> 
> DSN-query for domain "samba4.my.domain" was successful. 
> The query was for _ldap._tcp.dc._msdcs.samba4.my.domain SRV-entry.
> 
> The following AD controller was identified:
> 
> contact-samba4.samba4.my.domain
> 
> 
> The most frequent errors for this error is:
> 
> - missing A-entry 
> - AD has no network connection
> 
> 
> 
> Below, the original text (in German):
> 
> Die DNS-Abfrage über den Ressourceneintrag der Dienstidentifizierung 
> (SRV), der zur Suche eines Active Directory-Domänencontrollers für
> die 
> Domäne "samba4.my.domain" verwendet wird, wurde erfolgreich
> abgeschlossen:
> 
> Die Abfrage war für den SRV-Eintrag für 
> _ldap._tcp.dc._msdcs.samba4.my.domain
> 
> Die folgenden Active Directory-Domänencontroller wurde von der
> Abfrage 
> identifiziert:
> 
> contact-samba4.samba4.my.domain
> 
> Die häufigsten Ursachen dieses Fehlers sind:
> 
> - Host (A)-Einträge, die den Namen des Active 
> Directory-Domänencontroller dessen IP-Adressen zuordnen, fehlen oder 
> enthalten nicht die richtigen Adressen.
> 
> - Die in DNS registrierten Active Directory-Domänencontroller
> verfügen 
> nicht über eine Netzwerkverbindung oder werden nicht ausgeführt.
> 
> 
> 
> -- 
> Tomasz Chmielewski 
> http://wpkg.org 
> -- 
> To unsubscribe from this list go to the following URL and read the 
> instructions:  https://lists.samba.org/mailman/options/samba
>