[Samba] Possibly WERR_DS_DRA_ACCESS_DENIED or NT_STATUS_CANT_ACCESS_DOMAIN_INFO

[Rowland Penny]

On Thu, 2 May 2019 11:56:30 -0400
James Fowler via samba <samba at lists.samba.org> wrote:

> So we have two different Samba servers we are trying to connect to
> what was originally a Windows 2003 AD and was raised to 2008R2 (both
> Forest and Domain).
> (We really only need to connect one of them - the one hosting Samba
> 4.7.6).
> 
> Any ideas or suggestions are helpful!  We've scoured the lists
> (Rowland - you are amazing), but still not found what is wrong (we
> think it is probably a config issue on the Win2k8R2 DC).
> 
> Thank you in advance!
> 
> James
> 
> 
> There is presently a single Windows 2k8R2 domain controller.
> Our focus is on Samba 4.7.6 on Ubuntu.  We also get the same error
> with Samba 4.6.7 on Ubuntu (same smb.conf).
> 
> We can connect to all of the necessary ports on the Win2k8R2 DC from
> both servers hosting Samba.
> 
> Here are details from Samba 4.7.6 join attempt and troubleshooting
> 
> *smb.conf:*

If you are joining a new DC to an existing domain, why do you have a
smb.conf ?
Does it already exist ?
From all the cruft in it, it looks like it does.
If it does exist, then remove it and try again.

Rowland