[Samba] Problem joining some computers to domain with samba4

[Rowland Penny]

On 29/07/15 17:43, Javier Amor Garcia wrote:
> Hello all,
>
> I have a client which has a windows XP which cannot join the domain. 
> Other computes are joined and working normally.
>
> I have raised the log level to 8 but I don't see (or I am unable to 
> see) any error.
>
> In Windows XP I receive a  'Internal error' and I have a 'Unable to 
> bind to DS'  in windows NetSetup.log.
>
> I have no idea of what is going on. Can someone give me a pointer?
>
> Here is the full NetSetup.log for the join operation:
>
> 7/29 13:16:54 NetpDoDomainJoin
> 07/29 13:16:54 NetpMachineValidToJoin: 'COMPUTER5'
> 07/29 13:16:54 NetpGetLsaPrimaryDomain: status: 0x0
> 07/29 13:16:54 NetpMachineValidToJoin: status: 0x0
> 07/29 13:16:54 NetpJoinDomain
> 07/29 13:16:54     Machine: COMPUTER5
> 07/29 13:16:54     Domain: domain.local
> 07/29 13:16:54     MachineAccountOU: (NULL)
> 07/29 13:16:54     Account: domain.local\test11
> 07/29 13:16:54     Options: 0x27
> 07/29 13:16:54     OS Version: 5.1
> 07/29 13:16:54     Build number: 2600
> 07/29 13:16:54     ServicePack: Service Pack 2
> 07/29 13:16:54 NetpValidateName: checking to see if 'domain.local' is 
> valid as type 3 name
> 07/29 13:16:54 NetpCheckDomainNameIsValid [ Exists ] for 
> 'domain.local' returned 0x0
> 07/29 13:16:54 NetpValidateName: name 'domain.local' is valid for type 3
> 07/29 13:16:54 NetpDsGetDcName: trying to find DC in domain 
> 'domain.local', flags: 0x1020
> 07/29 13:16:54 NetpDsGetDcName: found DC 
> '\\server-central.domain.local' in the specified domain
> 07/29 13:16:54 NetpJoinDomain: status of connecting to dc 
> '\\server-central.domain.local': 0x0
> 07/29 13:16:55 NetpGetLsaPrimaryDomain: status: 0x0
> 07/29 13:16:55 NetpGetDnsHostName: Read NV Hostname: tec-rodolfo
> 07/29 13:16:55 NetpGetDnsHostName: PrimaryDnsSuffix defaulted to DNS 
> domain name: domain.local
> 07/29 13:16:55 NetpLsaOpenSecret: status: 0xc0000034
> 07/29 13:16:55 NetpGetLsaPrimaryDomain: status: 0x0
> 07/29 13:16:55 NetpLsaOpenSecret: status: 0xc0000034
> 07/29 13:16:55 NetpManageMachineAccountWithSid: NetUserAdd on 
> '\\server-central.domain.local' for 'COMPUTER5$' failed: 0x8b0
> 07/29 13:16:55 NetpManageMachineAccountWithSid: status of attempting 
> to set password on '\\server-central.domain.local' for 'COMPUTER5$': 0x0
> 07/29 13:16:55 NetpJoinDomain: status of creating account: 0x0
> 07/29 13:16:55 NetpGetComputerObjectDn: Unable to bind to DS on 
> '\\server-central.domain.local': 0x54f
> 07/29 13:16:55 NetpSetDnsHostNameAndSpn: NetpGetComputerObjectDn 
> failed: 0x54f
> 07/29 13:16:55 ldap_unbind status: 0x0
> 07/29 13:16:55 NetpJoinDomain: status of setting DnsHostName and SPN: 
> 0x54f
> 07/29 13:16:55 NetpJoinDomain: initiaing a rollback due to earlier errors
> 07/29 13:16:55 NetpGetLsaPrimaryDomain: status: 0x0
> 07/29 13:16:55 NetpManageMachineAccountWithSid: status of disabling 
> account 'COMPUTER5$' on '\\server-central.domain.local': 0x0
> 07/29 13:16:55 NetpJoinDomain: rollback: status of deleting computer 
> account: 0x0
> 07/29 13:16:55 NetpLsaOpenSecret: status: 0x0
> 07/29 13:16:55 NetpJoinDomain: rollback: status of deleting secret: 0x0
> 07/29 13:16:55 NetpJoinDomain: status of disconnecting from 
> '\\server-central.domain.local': 0x0
> 07/29 13:16:55 NetpDoDomainJoin: status: 0x54f
> -------------
>
> I have no idea wa
>

Firewall ?

Rowland