[Samba] Samba AD 4.8.3 Windows Server 2016 Active Directory Users and Computers: The procedure number is out of range

Thomas Glanzmann thomas at glanzmann.de
Wed Jul 18 15:25:51 UTC 2018

I try to connect with Active Directory Users and Computers from a
W2k16 to a Samba 4.8.3 DC. I get the following error message:


Active Directory Domain Services
Naming information cannot be located because:

The procedure number is out of range.

Contact your system administrator to verify that your domain is properly configured and is currently online.

In the logs with debug level 3 I don't see anything. My Samba Config and
setup script is here, my logs as well:


But what I really would like to do is enable the following:


Setup delegation for a machine account 'Trust this computer for
delegation to any service (Kerberos only)'. Is there a way to do this
from the command line? For the user account I think that, I found it:

(infra) [/local/samba-config/v101] / /local/samba/bin/samba-tool delegation for-any-protocol  -s /home/sithglan/work/scripts/lab/output/smb-v101.conf Administrator on
ldb_wrap open of secrets.ldb
(infra) [/local/samba-config/v101] / /local/samba/bin/samba-tool delegation for-any-service  -s /home/sithglan/work/scripts/lab/output/smb-v101.conf Administrator on
(infra) [/local/samba-config/v101] / /local/samba/bin/samba-tool delegation show -s /home/sithglan/work/scripts/lab/output/smb-v101.conf Administrator

Note, my goal is to run 9 different active directory domains in different
VLANs, so far I succeeded. And with samba my setup time went down from 10
minutes to 15 seconds. I'm setting up Active Directory Domains for training
environments on a regular basis (once a week).

I'm grateful for any pointers.


More information about the samba mailing list