[Samba] SAMBA failed join domain DC

[denis.shigapov]

Not join((
samba-tool domain join example.ru DC -Uvas.lah --password=password --realm=EXAMPLE.RU --site=SITE2 -d 4 

samba find srv-site3-dc01 and failed join to server DC srv-site3-dc01


lpcfg_load: refreshing parameters from /etc/samba/smb.conf
Processing section "[global]"
Processing section "[netlogon]"
Processing section "[sysvol]"
pm_process() returned Yes
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
added interface eth0 ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0
added interface eth0 ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0
added interface eth0 ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0
added interface eth0 ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0
added interface eth0 ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0
added interface eth0 ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0
resolve_lmhosts: Attempting lmhosts lookup for name srv-site3-dc01.example.ru<0x20>
getlmhostsent: lmhost entry: 127.0.0.1 localhost 
getlmhostsent: lmhost entry: 192.168.55.1 srv-dc01 
Advancing clock by 3 seconds to cope with clock skew
workgroup is EXAMPLE
realm is EXAMPLE.ru
Adding CN=SRV-SITE2-DC01,OU=Domain Controllers,DC=example,DC=ru
Adding CN=SRV-SITE2-DC01,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru
Adding CN=NTDS Settings,CN=SRV-SITE2-DC01,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=example,DC=ru
Using binding ncacn_ip_tcp:srv-site3-dc01.EXAMPLE.ru[,seal]
Mapped to DCERPC endpoint 135
added interface eth0 ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0
added interface eth0 ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0
resolve_lmhosts: Attempting lmhosts lookup for name srv-site3-dc01.EXAMPLE.ru<0x20>
getlmhostsent: lmhost entry: 127.0.0.1 localhost 
getlmhostsent: lmhost entry: 192.168.55.1 srv-dc01 
Mapped to DCERPC endpoint 50244
added interface eth0 ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0
added interface eth0 ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0
resolve_lmhosts: Attempting lmhosts lookup for name srv-site3-dc01.example.ru<0x20>
getlmhostsent: lmhost entry: 127.0.0.1 localhost 
getlmhostsent: lmhost entry: 192.168.55.1 srv-dc01 
Join failed - cleaning up
ldb_wrap open of secrets.ldb
Could not find machine account in secrets database: Failed to fetch machine account password for EXAMPLE from both secrets.ldb (Could not find entry to match
filter: '(&(fl
atname=EXAMPLE)(objectclass=primaryDomain))' base: 'cn=Primary Domains': No such object: dsdb_search at ../source4/dsdb/common/util.c:4636) and from
/var/lib/samba/private/
secrets.tdb: NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Deleted CN=SRV-SITE2-DC01,OU=Domain Controllers,DC=example,DC=ru
Deleted CN=NTDS Settings,CN=SRV-SITE2-DC01,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=EXAMPLE,DC=ru
Deleted CN=SRV-SITE2-DC01,CN=Servers,CN=SITE2,CN=Sites,CN=Configuration,DC=EXAMPLE,DC=ru
ERROR(ldb): uncaught exception - LDAP error 10 LDAP_REFERRAL -  <0000202B: RefErr: DSID-030A0B09, data 0, 1 access points
        ref 1: '7bbe1649-5261-430c-b473-9b85a36719b5._msdcs.EXAMPLE.ru'
> <ldap://7bbe1649-5261-430c-b473-9b85a36719b5._msdcs.EXAMPLE.ru>
  File "/usr/lib64/python2.7/site-packages/samba/netcmd/__init__.py", line 176, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/samba/netcmd/domain.py", line 661, in run
    machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
  File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1474, in join_DC
    ctx.do_join()
  File "/usr/lib64/python2.7/site-packages/samba/join.py", line 1375, in do_join
    ctx.join_add_objects()
  File "/usr/lib64/python2.7/site-packages/samba/join.py", line 668, in join_add_objects
    ctx.samdb.modify(m)


В Вт, 20/02/2018 в 11:47 +0000, Rowland Penny via samba пишет:
> On Tue, 20 Feb 2018 14:10:16 +0500
> "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote:
> 
> It seems that the problem starts here:
> 
> Could not find machine account in secrets database
> 
> Yet near the top there is: Setting up secrets.ldb
> 
> It seems that either 'secrets.ldb' doesn't contain the required info or
> 'vas.lah' doesn't have the required permissions to read it.
> 
> You also shouldn't need to set the DC to join to, Samba can find a DC
> to use.
> 
> Is it possible you could try the join command like this:
> 
> samba-tool domain join EXAMPLE DC -UAdministrator --password=password
> --realm=EXAMPLE.RU --site=SITE2
> 
> Rowland
>