[Samba] Fwd: help - problem joining samba 4 AD to an existing Windows AD Domain Server

[Rowland Penny]

On 28/10/2022 16:13, Rowland Penny via samba-technical wrote:
> 
> Moving to samba mailing list:
> 
> On 28/10/2022 16:07, jmpatagonia via samba-technical wrote:
>> Hello, we are using this document -->
>> https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory
>> Everything is alright, but one of the last command "samba-tool domain 
>> join
>> cpern.edu.ar DC -k yes" starting working well but have and error and 
>> break:

What version of Samba are you using, '-k yes' was replaced by 
'--use-kerberos=required' at 4.15.0

>>
>> Partition[DC=cpern,DC=edu,DC=ar] objects[43964/22106]
>> linked_values[1522/1116]
>>
>> Partition[DC=cpern,DC=edu,DC=ar] objects[44162/22106]
>> linked_values[1525/1116]
>>
>> Partition[DC=cpern,DC=edu,DC=ar] objects[44384/22106]
>> linked_values[1525/1116]
>>
>> Partition[DC=cpern,DC=edu,DC=ar] objects[44591/22106]
>> linked_values[1525/1116]
>>
>> Partition[DC=cpern,DC=edu,DC=ar] objects[44767/22106]
>> linked_values[1525/1116]
>>>>
>> Deleted CN=DC0,OU=Domain Controllers,DC=cpern,DC=edu,DC=ar
>>
>> Deleted CN=NTDS Settings,CN=DC0,CN=Servers,CN=
>> *Nombre-predeterminado-primer-sitio*
>> ,CN=Sites,CN=Configuration,DC=cpern,DC=edu,DC=ar
>>
>> Deleted
>> CN=DC0,CN=Servers,CN=Nombre-predeterminado-primer-sitio,CN=Sites,CN=Configuration,DC=cpern,DC=edu,DC=ar
>>
>> ERROR(runtime): uncaught exception - (8420, 
>> 'WERR_DS_CANT_FIND_EXPECTED_NC')
>>
>> File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py", line 186,
>> in _run
>>
>> return self.run(*args, **kwargs)
>>
>> File "/usr/lib/python3/dist-packages/samba/netcmd/domain.py", line 
>> 661, in
>> run
>>
>> join_DC(logger=logger, server=server, creds=creds, lp=lp, domain=domain,
>>
>> File "/usr/lib/python3/dist-packages/samba/join.py", line 1559, in 
>> join_DC
>>
>> ctx.do_join()
>>
>> File "/usr/lib/python3/dist-packages/samba/join.py", line 1449, in 
>> do_join
>>
>> ctx.join_replicate()
>>
>> File "/usr/lib/python3/dist-packages/samba/join.py", line 1006, in
>> join_replicate
>>
>> repl.replicate(nc, source_dsa_invocation_id,
>>
>> File "/usr/lib/python3/dist-packages/samba/drs_utils.py", line 338, in
>> replicate
>>
>> (level, ctr) = self.drs.DsGetNCChanges(self.drs_handle, req_level, req)
>>
>>
>> Any idea ?
>>
>>
>> Regards
> 
>> Partition[DC=cpern,DC=edu,DC=ar] objects[44981/22106]
>> linked_values[1525/1116]
>>
>> Partition[DC=cpern,DC=edu,DC=ar] objects[45102/22106]
>> linked_values[1533/1116]
>>
>> *Done with always replicated NC (base, config, schema)*
>>
>> *Replicating DC=DomainDnsZones,DC=cpern,DC=edu,DC=ar*
>>
>> *Join failed - cleaning up*

You can ignore everything after the line above, it is just an artefact 
of the failure.

What Windows DC are you trying to join to ?
It wouldn't be a 2003 or earlier would it ?

Rowland