[Samba] Problem joining an AD

[Rowland penny]

On 26/03/16 12:13, Luca Bertoncello wrote:
> Hi list!
>
> I have a very strange problem...
>
> I configured Samba 4.1.6 on a Ubuntu 14.04 Server to act as AD-Controller.
> It works without any problem.
>
> Then I wanted to join the AD two other Servers with Ubuntu 14.04 and Samba
> 4.1.6.
> The first works without any problem, the second (same configuration!) not...
>
> Here my smb.conf:
>
> # Global parameters
> [global]
>          workgroup = CCH
>          realm = CCH.INTRA
>          netbios name = MAIN
>          server role = MEMBER SERVER
>          server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, smb
>          dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, winreg, srvsvc
>
>          template shell = /bin/bash
>          template homedir = /home/%ACCOUNTNAME%
>
> [transfer]
>          comment = Public Stuff
>          path = /home/transfer
>          public = yes
>          writable = yes
>          browseable = yes
>
> I configured NSS and PAM to authenticate agains Samba and it works!
> But if I try to connect to samba using smbclient I always get:
>
> 	session setup failed: NT_STATUS_ACCESS_DENIED
>
> Could someone suggest me what can I do to resolve the problem?
>
> Thanks a lot!
> Luca Bertoncello
> (lucabert at lucabert.de)
>

How did you join the machines to the DC, I think I know, but I want you 
to confirm it ?

Rowland