[Samba] LDAP error 53 LDAP_UNWILLING_TO_PERFORM

[Rowland Penny]

On Fri, 24 May 2024 16:22:33 +0300
Omnis ludis - games via samba <samba at lists.samba.org> wrote:

> good afternoon, when entering into the domain an error occurs, the
> administrator has all the rights, but for some reason it is not
> possible to enter this server into the domain, samba 4.19.0, the log
> is attached 
>
> INFO 2024-05-24 17:23:00,320
> pid:73718 /opt/reddc/lib/python3.8/site-packages/samba/netcmd/main.py
> #91: workgroup is DOMAIN INFO 2024-05-24 17:23:00,320 pid:73718
> /opt/reddc/lib/python3.8/site-packages/samba/netcmd/main.py #91:
> realm is doamin.local

I do hope that 'domain.local' is sanitisation for your real dns domain.

> ERROR(ldb): uncaught exception - LDAP error 53
> LDAP_UNWILLING_TO_PERFORM - <00002010: SvcErr: DSID-031A124C, problem
> 5003 (WILL_NOT_PERFORM), data 0
> > <>
>   File "samba/netcmd/__init__.py", line 279, in
> samba.netcmd.Command._run File "samba/netcmd/domain/join.py", line
> 130, in samba.netcmd.domain.join.cmd_domain_join.run
>   File "samba/join.py", line 1683, in samba.join.join_DC
>   File "samba/join.py", line 1590, in samba.join.DCJoinContext.do_join
>   File "samba/join.py", line 1563, in samba.join.DCJoinContext.do_join
>   File "samba/join.py", line 649, in
> samba.join.DCJoinContext.join_add_objects
> Adding CN=DCRED,OU=Domain Controllers,DC=domain,DC=local
> Join failed - cleaning up

What OS is this ?

Can you confirm the Samba version is 4.19.0 ?

It seems that you are trying to join an RODC, is this correct ?

What was the actual command you used to join the domain ? 

Rowland