[Samba] Domain Member Join Problems

Robert A Wooldridge bob.wooldridge at edm-inc.com
Mon Oct 7 23:04:17 UTC 2019

I'm setting up a domain member with Debian bust ADC and a Debian bust 
domain member.  I've got a windows machine that has joined the domain 
and I can login to it.

The Debian domain member is throwing a DNS error when I do net ads join 

net ads join -Uadministrator
Enter administrator's password:
kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed for 
ldap/athena.edm-inc.com with user[administrator] realm[EDM-INC.COM]: 
Strong(er) authentication required
Using short domain name -- EDM
Joined 'SNAPS2' to dns domain 'edm-inc.com'
DNS Update for snaps2.edm-inc.com failed: ERROR_DNS_UPDATE_FAILED

Joining with samba-tool I get this:

samba-tool domain join EDM MEMBER -Uadministrator
Password for [EDM\administrator]:
WARNING: talloc_steal with references at ../talloc.c:2075
         reference at ../pytalloc_util.c:182
Joined domain EDM (S-1-5-21-etc...)

Any ideas what's happening?

Bob Wooldridge
EDM Incorporated

More information about the samba mailing list