[Samba] net ads join -U administrator
rowlandpenny241155 at gmail.com
Mon Sep 28 19:31:28 UTC 2015
On 28/09/15 21:02, Karel González Herrera wrote:
> I'm trying to join a samba server to a domain as a member server to
> share files
> root at salva-focsa:~# net ads join -U karel.gonzalez
> Host is not configured as a member server.
> Invalid configuration. Exiting....
> Failed to join domain: This operation is only allowed for the PDC of
> the domain.
> this is may smb.conf
> netbios name = salva-focsa
> workgroup =DTNORTE
> security = ADS
> realm = DTNORTE.ETECSA.CU
> dedicated keytab file = /etc/krb5.keytab
> kerberos method = secrets and keytab
> idmap config *:backend = tdb
> idmap config *:range = 2000-9999
> idmap config SAMDOM:backend = ad
> idmap config SAMDOM:schema_mode = rfc2307
> idmap config SAMDOM:range = 10000-99999
> winbind nss info = rfc2307
> winbind trusted domains only = no
> winbind use default domain = yes
> winbind enum users = yes
> winbind enum groups = yes
> winbind refresh tickets = Yes
> path = /srv/samba/test
> read only = no
Hi, it should work, in fact, using a very similar smb.conf, it worked
for me a few hours ago, the only difference is that I used
'Administrator' in the join command.
So, I suppose the questions have to be, what OS is the member server set
up on ?
What is the AD DC ?
What is in /etc/resolv.conf ?
What is in /etc/krb5.conf ?
Is the time the same on the member server and AD DC ?
What version(s) of Samba are you using ?
More information about the samba