[Samba] problem with samba 3.5.6 try to join W2K8

[tms3 at tms3.com]

>
> hi,
>    I trying to join a samba 3.5.6 (debian) on a domain W2K8 without
> kerberos followin the wiki page
> (http://wiki.samba.org/index.php/Samba_&_Active_Directory)
> using net ads join
ads implies kerberos
>
>
>
> i've got this error Failed to join domain: failed to
> join domain 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED
>
> conf in /etc/smb.conf
>      workgroup = MYDOMAIN
>
>        server string = %h server
> # allow trusted domains = no
>        realm =   MYDOMAIN.COM
>        password server = mntphone001.mydomain.com
>                  preferred master = no
>        security = ADS
>        encrypt passwords = yes
>        log level = 5
>        log file = /var/log/samba/%m
>        max log size = 50
>        printcap name = cups
>        printing = cups
>        winbind enum users = Yes
>        winbind enum groups = Yes
>        winbind use default domain = Yes
>        winbind nested groups = Yes
>        winbind separator = +
>        idmap uid = 2000-20000
>        idmap gid = 2000-20000
>          client use spnego = yes
>      ;template primary group = "Domain Users"
>        template shell = /bin/bash
>        auth methods = winbind
>
>
> log i have when i do
> net ads join  -Umylogin%passwd -S mntphone001.mydomain.com -d 2
>      rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
> [2011/03/02 13:24:00.801641,  2] lib/interface.c:340(add_interface)
>      added interface eth0 ip=fe80::213:72ff:fe56:6db6%eth0
> bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff::
> [2011/03/02 13:24:00.801787,  2] lib/interface.c:340(add_interface)
>      added interface eth0 ip=172.23.36.4 bcast=172.23.36.255
> netmask=255.255.255.0
> [2011/03/02 13:24:00.802018,  1] 
> libnet/libnet_join.c:1947(libnet_Join)
>      libnet_Join:
>              libnet_JoinCtx: struct libnet_JoinCtx
>                      in: struct libnet_JoinCtx
>                              dc_name                  : 
> 'mntphone001.mydomain.com'
>                              machine_name             : 'MNTSLX001'
>                              domain_name              : *
>                                      domain_name              : 
> 'MYDOMAIN.COM'
>                              account_ou               : NULL
>                              admin_account            : 'mylogin'
>                              admin_password           : *
>                              machine_password         : NULL
>                              join_flags               : 0x00000023 
> (35)
>                                            0: 
> WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS
>                                            0: 
> WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
>                                            0: 
> WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
>                                            0: 
> WKSSVC_JOIN_FLAGS_DEFER_SPN
>                                            0: 
> WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
>                                            0: 
> WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
>                                            1: 
> WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
>                                            0: 
> WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
>                                            0: 
> WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
>                                            1: 
> WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
>                                            1: 
> WKSSVC_JOIN_FLAGS_JOIN_TYPE
>                              os_version               : NULL
>                              os_name                  : NULL
>                              create_upn               : 0x00 (0)
>                              upn                      : NULL
>                              modify_config            : 0x00 (0)
>                              ads                      : NULL
>                              debug                    : 0x01 (1)
>                              use_kerberos             : 0x00 (0)
>                              secure_channel_type      : SEC_CHAN_WKSTA 
> (2)
> [2011/03/02 13:24:00.814776,  1] 
> libnet/libnet_join.c:1978(libnet_Join)
>      libnet_Join:
>              libnet_JoinCtx: struct libnet_JoinCtx
>                      out: struct libnet_JoinCtx
>                              account_name             : NULL
>                              netbios_domain_name      : 'MYDOMAIN'
>                              dns_domain_name          : 'mydomain.com'
>                              forest_name              : 'root.com'
>                              dn                       : NULL
>                              domain_sid               : *
>                                      domain_sid               :
> S-1-5-21-796845957-790525478-725345543
>                              modified_config          : 0x00 (0)
>                              error_string             : 'failed to 
> join domain
> 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED'
>                              domain_is_ad             : 0x01 (1)
>                              result                   : 
> WERR_NOT_SUPPORTED
> [2011/03/02 13:24:00.815116,  2] utils/net.c:916(main)
>      return code = -1
> Failed to join domain: failed to join domain 'MYDOMAIN.COM' over rpc:
> NT_STATUS_NOT_SUPPORTED
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba