[Samba] Unable to join domain I think.

Rob Campbell robcampbell08105 at gmail.com
Tue Sep 13 20:22:32 UTC 2022


[Tue Sep 13 16:15:43] [*root at dc02~$*] net ads testjoin
Join is OK

[Tue Sep 13 16:19:14] [*root at D01~$*] net ads testjoin
ads_connect: No logon servers are currently available to service the logon
request.
Join to domain is not valid: No logon servers are currently available to
service the logon request.

[Tue Sep 13 16:19:25] [*root at DC01/var/log/samba$*] net ads testjoin
kerberos_kinit_password HOME at HOME.ROB-CAMPBELL.LAN failed: Client not found
in Kerberos database
Join to domain is not valid: The name provided is not a properly formed
account name.

DC01 us the DC

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In all things, Be Intentional.


On Tue, Sep 13, 2022 at 3:39 AM Rowland Penny via samba <
samba at lists.samba.org> wrote:

>
>
> On 13/09/2022 03:16, Rob Campbell via samba wrote:
> > [Mon Sep 12 21:56:43] [root at dc02~$] realm leave
> > [Mon Sep 12 21:57:49] [root at dc02~$] realm list
> > [Mon Sep 12 21:57:51] [root at dc02~$] net ads join -U Administrator
> > Host is not configured as a member server.
> > Invalid configuration.  Exiting....
> > Failed to join domain: This operation is only allowed for the PDC of the
> > domain.
> >
> > I run through the wiki steps to add a domain member then.
> >
> > [Mon Sep 12 21:58:12] [root at dc02~$] net ads join -U Administrator
> > Enter Administrator's password:
> > Failed to join domain: failed to connect to AD: No logon servers are
> > currently available to service the logon request.
> > [Mon Sep 12 21:58:19] [root at dc02~$] realm list
> > home.rob-campbell.lan
> >    type: kerberos
> >    realm-name: HOME.ROB-CAMPBELL.LAN
> >    domain-name: home.rob-campbell.lan
> >    configured: kerberos-member
> >    server-software: active-directory
> >    client-software: winbind
> >    required-package: winbind
> >    required-package: libpam-winbind
> >    required-package: samba-common-bin
> >    login-formats: HOME\%U
> >    login-policy: allow-any-login
> >
> > Not sure what's happening.  Is it joining the domain or is it not joining
> > the domain?
>
> I wouldn't mix the Samba tools with the ipa tools. What does 'net ads
> testjoin' show when run as root ?
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


More information about the samba mailing list