Please send us the output from the attached dtrace script. Prior to running smbadm join CLI, start the following in another shell for tracing the domain join operation:

./domainjoin_trace_krb5.d -p `pgrep smbd` | tee trace.out

Also, the output from the following script:

http://opensolaris.org/os/project/cifs-server/files/cifs-gendiag


Thanks,

Natalie

Richard Bruce wrote:
Hmmm.... I retried this morning with help from someone in the Domain Admins group. The 'smbadm -join' fails when using his account as well. The Solaris box time is synced within a few seconds to the AD server. The computer object was precreated in the AD. We even tried setting the AD delegation property to allow delegation before attempting the join. The join still fails. Any idea how to troubleshoot this further to find out specifically why the join is failing?
Thanks in advance for your help.

Richard Bruce

#!/usr/sbin/dtrace -s

/*#pragma D option quiet*/
#pragma D option flowindent

pid$target::smbd_join:entry
/guard++ == 0/
{
        self->traceme = 1;
}

pid$target:libsmb::entry,
pid$target:libsmbrdr::entry,
pid$target:libsmbns::entry,
pid$target:libmlsvc::entry,
pid$target::krb*:entry
/self->traceme/
{
        printf("Called from %a", caller);
}

pid$target:libsmb::return,
pid$target:libsmbrdr::return,
pid$target:libsmbns::return,
pid$target:libmlsvc::return,
pid$target::krb*:return
/self->traceme/
{
        printf("%s+%x returned %x", probefunc, arg0, arg1);
}

pid$target::smbd_join:return
/self->traceme/
{
        printf("%s+%x returned %x", probefunc, arg0, arg1);
        guard--;
        self->traceme = 0;
}
_______________________________________________
cifs-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/cifs-discuss

Reply via email to