[Samba] To Andrew Barlett regarding 'WERR_ACCESS_DENIED'

[Juan Pablo Lorier]

Dear Andrew,

I know you may not have time for this, but I found a list message from you in August ([cifs-protocol] Errors when doing a DsAddEntry ) where you show quite the same error I get when I try to join Samba 4a17 to a W2003 domain.
I get to add partialy the server to the domain, but fails with "WERR_ACCESS_DENIED" at some point. I've searchead the web without finding a solution and posted in the list also with not much help. The output is this:

[root at vpdc samba]# bin/samba-tool domain join montecarlotv.com.uy DC -Uadministrador --realm=montecarlotv.com.uy
Finding a writeable DC for domain 'montecarlotv.com.uy'
Found DC ads1.montecarlotv.com.uy
Password for [CANAL4\administrador]:
workgroup is CANAL4
realm is montecarlotv.com.uy
checking samaccountname
Deleted CN=RID Set,CN=VPDC,OU=Domain Controllers,DC=montecarlotv,DC=com,DC=uy
Deleted CN=VPDC,OU=Domain Controllers,DC=montecarlotv,DC=com,DC=uy
Deleted CN=NTDS Settings,CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
Deleted CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
Adding CN=VPDC,OU=Domain Controllers,DC=montecarlotv,DC=com,DC=uy
Adding CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
Adding CN=NTDS Settings,CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
DsAddEntry failed with status (5, 'WERR_ACCESS_DENIED') info (8567, 'WERR_DS_INCOMPATIBLE_VERSION')
Join failed - cleaning up
checking samaccountname
Deleted CN=VPDC,OU=Domain Controllers,DC=montecarlotv,DC=com,DC=uy
Deleted CN=VPDC,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
ERROR(runtime): uncaught exception - DsAddEntry failed
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 167, in _run
    return self.run(*args, **kwargs)
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/domain.py", line 162, in run
    machinepass=machinepass)
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line 949, in join_DC
    ctx.do_join()
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line 854, in do_join
    ctx.join_add_objects()
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line 467, in join_add_objects
    ctx.join_add_ntdsdsa()
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line 416, in join_add_ntdsdsa
    ctx.DsAddEntry([rec])
  File "/usr/local/samba/lib64/python2.6/site-packages/samba/join.py", line 379, in DsAddEntry
    raise RuntimeError("DsAddEntry failed")


If I can find help you with some more data, please, don't hesitate in asking.
Regards,