[Samba] Domain Join

Marc Muehlfeld samba at marc-muehlfeld.de
Wed May 22 10:55:28 MDT 2013


Hello Robert,

Am 22.05.2013 15:56, schrieb Sandbox:
> Finding a writeable DC for domain 'test.domain.lan'
> Found DC domainc01.test.domain.lan
> Password for [WORKGROUP\Administrator]:
> Failed to bind - LDAP error 49 LDAP_INVALID_CREDENTIALS -
> <SASL:[GSS-SPNEGO]: NT_STATUS_LOGON_FAILURE> <>
> Failed to connect to 'ldap://domainc01.test.domain.lan' with backend
> 'ldap': (null)
> ...


Just some toughts on that:

* Do you have any special characters in your password? E. g. german 
umlauts are making trouble here if set on windows and when the password 
is validated from unix services against AD.



* Can you do a ldapsearch from the new machine in the existing directory 
or is the access there also denied?

# ldapsearch -h domainc01.test.domain.lan -b dc=test,dc=domain,dc=lan 
-LLL -D cn=Administrator,..... -W



* Kerberos settings are all fine and you can get a ticket?

https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC#Getting_ready_for_joining_Samba_as_a_DC_to_an_existing_domain


Regards,
Marc


More information about the samba mailing list