[Samba] Unable to join Windows 2008 R2 server DC to Samba DC

Justin Foreman jforeman at dignitastechnologies.com
Wed Apr 4 03:05:31 UTC 2018


I’m unable to successfully join a Windows 2008 R2 server DC to my Samba4 domain.

I’ve followed the steps on the wiki of joining a Server 2008 R2 DC to a Samba domain. After I reboot the domain controller, I receive a blue screen in regards to a corrupt AD database. I’ve tried Samba v4.6.7 and Samba 4.9.0pre1.

Prior to the reboot, I see the following three events on the Windows DC:
----- 
Attempt to update DNS Host Name of the computer object in Active Directory failed. The updated value was 'DC8.us.dignitastech.com'. The following error occurred:
Access is denied.
----- 
Attempt to update HOST Service Principal Names (SPNs) of the computer object in Active Directory failed. The updated values were 'RestrictedKrbHost/DC8.us.dignitastech.com' and 'RestrictedKrbHost/DC8'. The following error occurred:
Access is denied.
----- 
Internal error: An Active Directory Domain Services error has occurred.

Additional Data
Error value (decimal):
8374
Error value (hex):
20b6
Internal ID:
30d07c5
—— 

On the samba server, the only error that I can pick out in the log.samba (at debug 4) is the following DNS update failure:

  ../source4/dsdb/dns/dns_update.c:330: Failed DNS update - with error code 110

Any assistance is greatly appreciated as we have an (unfortunate) impending organizational requirement to use Windows domain controllers.

Thanks,
Justin


More information about the samba mailing list