[Samba] Trouble Joining Windows 2008R2 Domain with Error 'failed to lookup DC info for domain 'FULLY.QUALIFIED.DOMAIN' over rpc: Access denied'

[steve]

On Wed, 2014-03-05 at 18:29 -0500, J. Alexander Jacocks wrote:

For the join, try simply:
krb5.conf:
[libdefaults]
        default_realm = FULLY.QUALIFIED.DOMAIN
        dns_lookup_realm = false
        dns_lookup_kdc = true

with smb.conf:
[global]
   workgroup = FULLY
   realm = FULLY.QUALIFIED.DOMAIN
   security = ads
   kerberos method = system keytab

Put the frilly stuff back later.
HTH
Steve

> # cat /etc/krb5.conf

> 
> [libdefaults]
>  default_realm = FULLY.QUALIFIED.DOMAIN
>  dns_lookup_realm = false
>  dns_lookup_kdc = false
>  ticket_lifetime = 24h
>  renew_lifetime = 7d
>  forwardable = true