[Samba] problem with samba 3.5.6 try to join W2K8 solve

[zorg]

sorry for the mistake
I  meant with ADS
In fact the problem is the domain controller in have use in my conf was 
a second controller in read only so it could not  work

thank

Le 02/03/2011 13:58, zorg a écrit :
> hi,
>  I trying to join a samba 3.5.6 (debian) on a domain W2K8 without 
> kerberos followin the wiki page 
> (http://wiki.samba.org/index.php/Samba_&_Active_Directory)
> using net ads join i've got this error Failed to join domain: failed 
> to join domain 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED
>
> conf in /etc/smb.conf
>   workgroup = MYDOMAIN
>
>    server string = %h server
> # allow trusted domains = no
>    realm =   MYDOMAIN.COM
>    password server = mntphone001.mydomain.com
>         preferred master = no
>    security = ADS
>    encrypt passwords = yes
>    log level = 5
>    log file = /var/log/samba/%m
>    max log size = 50
>    printcap name = cups
>    printing = cups
>    winbind enum users = Yes
>    winbind enum groups = Yes
>    winbind use default domain = Yes
>    winbind nested groups = Yes
>    winbind separator = +
>    idmap uid = 2000-20000
>    idmap gid = 2000-20000
>     client use spnego = yes
>   ;template primary group = "Domain Users"
>    template shell = /bin/bash
>    auth methods = winbind
>
>
> log i have when i do
> net ads join  -Umylogin%passwd -S mntphone001.mydomain.com -d 2
>   rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
> [2011/03/02 13:24:00.801641,  2] lib/interface.c:340(add_interface)
>   added interface eth0 ip=fe80::213:72ff:fe56:6db6%eth0 
> bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff::
> [2011/03/02 13:24:00.801787,  2] lib/interface.c:340(add_interface)
>   added interface eth0 ip=172.23.36.4 bcast=172.23.36.255 
> netmask=255.255.255.0
> [2011/03/02 13:24:00.802018,  1] libnet/libnet_join.c:1947(libnet_Join)
>   libnet_Join:
>       libnet_JoinCtx: struct libnet_JoinCtx
>           in: struct libnet_JoinCtx
>               dc_name                  : 'mntphone001.mydomain.com'
>               machine_name             : 'MNTSLX001'
>               domain_name              : *
>                   domain_name              : 'MYDOMAIN.COM'
>               account_ou               : NULL
>               admin_account            : 'mylogin'
>               admin_password           : *
>               machine_password         : NULL
>               join_flags               : 0x00000023 (35)
>                      0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS
>                      0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME
>                      0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT
>                      0: WKSSVC_JOIN_FLAGS_DEFER_SPN
>                      0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED
>                      0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE
>                      1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED
>                      0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE
>                      0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE
>                      1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE
>                      1: WKSSVC_JOIN_FLAGS_JOIN_TYPE
>               os_version               : NULL
>               os_name                  : NULL
>               create_upn               : 0x00 (0)
>               upn                      : NULL
>               modify_config            : 0x00 (0)
>               ads                      : NULL
>               debug                    : 0x01 (1)
>               use_kerberos             : 0x00 (0)
>               secure_channel_type      : SEC_CHAN_WKSTA (2)
> [2011/03/02 13:24:00.814776,  1] libnet/libnet_join.c:1978(libnet_Join)
>   libnet_Join:
>       libnet_JoinCtx: struct libnet_JoinCtx
>           out: struct libnet_JoinCtx
>               account_name             : NULL
>               netbios_domain_name      : 'MYDOMAIN'
>               dns_domain_name          : 'mydomain.com'
>               forest_name              : 'root.com'
>               dn                       : NULL
>               domain_sid               : *
>                   domain_sid               : 
> S-1-5-21-796845957-790525478-725345543
>               modified_config          : 0x00 (0)
>               error_string             : 'failed to join domain 
> 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED'
>               domain_is_ad             : 0x01 (1)
>               result                   : WERR_NOT_SUPPORTED
> [2011/03/02 13:24:00.815116,  2] utils/net.c:916(main)
>   return code = -1
> Failed to join domain: failed to join domain 'MYDOMAIN.COM' over rpc: 
> NT_STATUS_NOT_SUPPORTED
>