[Samba] Failing to join existing AD as DC

[L.P.H. van Belle]

Because it shows its needed to..  

You can not chase a problem if you dont know if the base is correct. 
If the base if incorrect you can and will inherrit other problems which makes debugging a hell. 

I dont make "assumptions" because.. 

One of my previous bosses always states:  Assumptions are the mother of all f.ckups. 
And he is right on that one. 

That simple, sorry to say it like that but it is what it is. 

Greetz, 

Louis
 

> -----Oorspronkelijk bericht-----
> Van: Andrew Bartlett [mailto:abartlet at samba.org] 
> Verzonden: vrijdag 16 augustus 2019 12:11
> Aan: L.P.H. van Belle; samba at lists.samba.org; Alexander Harm
> Onderwerp: Re: [Samba] Failing to join existing AD as DC
> 
> On Fri, 2019-08-16 at 11:18 +0200, L.P.H. van Belle via samba wrote:
> > Good point Roy, 
> > 
> > So we can add the question. 
> > > I tried joining the same AD before and succeeded, 
> > 
> > Your other DC, is that in the same subnet? 
> > 
> > And is the windows firewall allowing the other subnet? 
> > telnet the DNS port from the samba server to the windows server.
> > 
> 
> I'm quite confused, why are you folks chasing down routing issues for
> an operations error on a valid LDAP connection?
> 
> This seems a very odd and increasingly tortured set of diagnostics.
> 
> Alexander,
> 
> I think the invalid credentials bit is a red herring, during the
> cleanup, the main backtrace shown looks like it doesn't like 
> one of the
> objects being modified over LDAP.
> 
> Examination of the source code shows that the only way a modify occurs
> is if we are in 'promote_existing' mode, so perhaps ensure 
> any accounts
> of the same name are first deleted, or choose an unused name for the
> DC. 
> 
> I hope this helps,
> 
> Andrew Bartlett
> -- 
> Andrew Bartlett                       https://samba.org/~abartlet/
> Authentication Developer, Samba Team  https://samba.org
> Samba Developer, Catalyst IT          
> https://catalyst.net.nz/services/samba
> 
> 
> 
>