[Samba] Cannot join Ubuntu12.04 Samba 4.1.17 to domain

Andrey Repin anrdaemon at yandex.ru
Fri Apr 17 17:41:49 MDT 2015


Greetings, ivenhov!

> I don't have krb5.conf at hand at the moment but I've checked it multiple
> times and I think is OK since I can get ticket via kinit.

Words are cheap.
I've just came back from work, where I'm ironing out last twists of recent
classic migration.
One of them been that krb5.conf on one of the gateway systems posed itself as
an authoritative KDC for a parent domain. Whole segment of client systems went
upside down and hanged in that pose until I actually began to match every
config line by line.

> resolv.conf points to my DNS

Not necessary as long as the domain names can be resolved correctly.

> I can resolve AD hostname via 
> host serverDC1001.dan2003.sample.domain.com

That's enough.

> and via
> host 10.80.8.88

> Regarding NetworkManager, my machine is a headless server so dnsmasq does
> not apply I guess?

NM is a network manager in its own rights. What you think about is
network-manager-gnome, most likely, and that is only a part of it.
Headless or not, NM can still be used to control networking connections.
So, Rowland's question wasn't all that useless.

> Bit of a back story
> Initially I had Samba 3.6 on that machine and it was joined to the domain,
> then removed from domain.
> I've done disk backup of it, then put Samba Sernet 4.1.17 on it and
> attempted to joined which fails.

1. Recheck the realm description in /etc/krb5.conf
2. Double check that date and timezone are set correctly.
`date -u` being the most trustworthy source.

> After 2 days of struggle I rolled back to the snapshot 3.6 issues join
> command and it worked.

> I haven't changed config files between versions
> Thanks for any suggestions.

You should, like, REALLY clean up your smb.conf. At least half of it is just a
garbage. And 'socket options' is literally a shot into your own leg.


-- 
With best regards,
Andrey Repin
Saturday, April 18, 2015 02:30:23

Sorry for my terrible english...



More information about the samba mailing list