[Samba] net ads join -U administrator

[Rowland Penny]

On 28/09/15 21:02, Karel González Herrera wrote:
> I'm trying to join a samba server to a domain as a member server to 
> share files
>
> root at salva-focsa:~#  net ads join -U karel.gonzalez
> Host is not configured as a member server.
> Invalid configuration.  Exiting....
> Failed to join domain: This operation is only allowed for the PDC of 
> the domain.
>
> this is may smb.conf
> [global]
>
>   netbios name = salva-focsa
>   workgroup =DTNORTE
>   security = ADS
>   realm = DTNORTE.ETECSA.CU
>   dedicated keytab file = /etc/krb5.keytab
>   kerberos method = secrets and keytab
>
>   idmap config *:backend = tdb
>   idmap config *:range = 2000-9999
>   idmap config SAMDOM:backend = ad
>   idmap config SAMDOM:schema_mode = rfc2307
>   idmap config SAMDOM:range = 10000-99999
>
>   winbind nss info = rfc2307
>   winbind trusted domains only = no
>   winbind use default domain = yes
>   winbind enum users  = yes
>   winbind enum groups = yes
>   winbind refresh tickets = Yes
>
> [demoshare]
>   path = /srv/samba/test
>   read only = no
>
>
>

Hi, it should work, in fact, using a very similar smb.conf, it worked 
for me a few hours ago, the only difference is that I used 
'Administrator' in the join command.

So, I suppose the questions have to be, what OS is the member server set 
up on ?
What is the AD DC ?
What is in /etc/resolv.conf ?
What is in /etc/krb5.conf ?
Is the time the same on the member server and AD DC ?
What version(s) of Samba are you using ?

Rowland