[Samba] Problems joining station in domain

[L.P.H. van Belle]

Marcio,

Upgrade you samba and i think all your problem get fixed with it.
Your configs are ok, system setup is also ok. 

I dont seen anyother reason then samba bug or samba/windows are out of sync.
Why this isnt working.

If you follow this upgrade path i know its correct in the end. 

Create this file repo file for apt. 
echo "deb http://apt.van-belle.nl/debian stretch-samba48 main contrib non-free" | sudo tee -a /etc/apt/sources.list.d/van-belle.list
echo "#deb http://apt.van-belle.nl/debian stretch-samba49 main contrib non-free" | sudo tee -a /etc/apt/sources.list.d/van-belle.list
echo "#deb http://apt.van-belle.nl/debian stretch-samba410 main contrib non-free" | sudo tee -a /etc/apt/sources.list.d/van-belle.list

Import my key.
wget -O - http://apt.van-belle.nl/louis-van-belle.gpg-key.asc | apt-key add - 

apt update -y && apt upgrade -y
Remove the 4.8 line from the repo, enable 4.9 repeat apt update && apt upgrade
systemctl stop samba-ad-dc && systemctl start samba-ad-dc
And repeat for the upgrade to 4.10.7

Sure yes, you can try 4.5 upgrade to 4.10.7, but i have not tested that. 
There are/where known AD upgrade problems, so i still suggest upgrade in steps. 

Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Andrew Bartlett via samba
> Verzonden: maandag 26 augustus 2019 23:51
> Aan: Marcio Demetrio Bacci; sambalist
> Onderwerp: Re: [Samba] Problems joining station in domain
> 
> On Mon, 2019-08-26 at 15:35 -0300, Marcio Demetrio Bacci via samba
> wrote:
> > Hi,
> > 
> > I'm having trouble entering stations in the domain, as 
> message below:
> > 
> > "
> > 
> > *error while attempting to join domain "EMPRESA"security id 
> structure is
> > invalid*"
> > 
> > In the log I see the following message:
> > 
> > tail -f /var/log/samba/log.samba
> > [2019/08/26 15:17:12.206883,  0]
> > ../source4/dsdb/common/util_samr.c:192(dsdb_add_user)
> >   Failed to create user record
> > CN=COMP0084,CN=Computers,DC=empresa,DC=com,DC=br: acl: 
> unable to get access
> > to CN=COMP0084,CN=Computers,DC=empresa,DC=com,DC=br
> > 
> > My user is Administrator and before was working.
> > 
> > The station is Windows 7 Professional and my DCs are Samba 4.
> > 
> > How could you solve this problem?
> 
> Very strange.  This is a pretty normal operation on a pretty normal
> codepath.  To chase it down further however can you please mention the
> full Samba version you are using?
> 
> Thanks,
> 
> Andrew Bartlett
> 
> -- 
> Andrew Bartlett
> https://samba.org/~abartlet/
> Authentication Developer, Samba Team         https://samba.org
> Samba Development and Support, Catalyst IT   
> https://catalyst.net.nz/services/samba
> 
> 
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>