[Samba] Unable to join domain?

[Dan Egli]

Okay, I guess it just takes a little while for Samba to see new users. I 
took a 30 min break, came back and tried "getent passwd dan" again, and 
this time it returned a user entry 
(dan:*:10003:10000::/bulk/home/dan:/bin/bash) for me. But when I try to 
ssh into the member server, ssh refuses to acknowledge the password, 
treating it as if I got the password wrong. I looked over the documents 
but they weren't a whole lot of help. And I tried looking into the 
documents for my linux distribution (Gentoo) but their documents are 
even older than those on the Samba page. So they are of no help.

On 2/7/2021 3:10 PM, Dan Egli via samba wrote:
> Okay, I got a little farther. net ads join seemed to be successful and 
> wbtool --ping-dc worked fine, so I tried the getent on user dan. Oops, 
> dan's in the system password file. Okay, userdel -r dan. Now getent 
> passwd dan comes back empty. Okay, that makes sense. I haven't created 
> user dan yet. Let's try the group. getent group "Domain Users" 
> succeeds, showing the domain users group with GID 10000. Great, now 
> logon to the DC and run samba-tool user create dan <password>. 
> samba-tool reports success. run getent passwd dan on the domain 
> mamber, nothing. Hmm.... run getent passwd dan on the DC, nothing.
>
> I guess I need more help.
>
> On 2/7/2021 2:57 PM, Dan Egli via samba wrote:
>> Strange. Maybe memory got corrupted or something. I ran the script 
>> and kinit did the exact same thing. So I decided "what the hell, it's 
>> worth a try" and rebooted Athena. When logged in again after the 
>> reboot I did the net ads join again, and it worked. I don't claim to 
>> understand WHY, but there you go.
>>
>> On 2/7/2021 2:25 PM, Rowland penny via samba wrote:
>>> On 07/02/2021 21:14, Dan Egli wrote:
>>>> I think I'm nearly there. I got to the point where I was running 
>>>> net ads join -U Administrator, but it does nothing when I do that:
>>>>
>>>>  # net ads join -U Administrator
>>>> Enter Administrator's password:<enter password>
>>>>
>>>> at which point it just sits there. Out of curosity, I ran strace on 
>>>> the net program as I was attempting to join. It shows reading each 
>>>> character individually, but not doing anything else. It just 
>>>> continues to look for input:
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "X", 1024)                      = 1
>>>> read(0, "\r", 1024)                     = 1
>>>> read(0, <sits here for eternity>
>>>>
>>>> I doubt I've encountered a bug, that's too big and ugly to have 
>>>> escaped detection. So what am I doing wrong? 
>>>
>>>
>>> I have no idea if you are doing anything wrong and if you are what 
>>> it is. Joining a Unix domain member usually just works for myself 😕
>>>
>>> Can you download this script: 
>>> https://github.com/thctlo/samba4/blob/master/samba-collect-debug-info.sh 
>>>
>>>
>>> Run it on the Unix domain member and post the output into a reply to 
>>> this post (sanitised if required).
>>>
>>> Rowland
>>>
>>>
>>>
>>
>