[Samba] Joining to a Windows 2012 R2 DC

[Taner Tas]

Hi,

I'm trying to join a Samba installation (4.8.6, Debian Strech) to
existing 2012-R2 DC. Fails with the message below:

# samba-tool domain join mydomain.tld DC -U"MYDOMAIN.TLD\Administrator"
--dns-backend=BIND9_DLZ --server=10.22.1.91

Password for [MYDOMAIN.TLD\Administrator]:
workgroup is MYDOMAIN
realm is mydomain.tld
Adding CN=DC3,OU=Domain Controllers,DC=mydomain,DC=tld
Join failed - cleaning up
ERROR(ldb): uncaught exception - LDAP error 53
LDAP_UNWILLING_TO_PERFORM -  <00002010: SvcErr: DSID-031A12D2, problem
5003 (WILL_NOT_PERFORM), data 0
> <>
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py",
line 176, in _run return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line
706, in run plaintext_secrets=plaintext_secrets)
  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1482, in
join_DC ctx.do_join()
  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1381, in
do_join ctx.join_add_objects()
  File "/usr/lib/python2.7/dist-packages/samba/join.py", line 616, in
join_add_objects ctx.samdb.add(rec)