You should add this to
https://www.illumos.org/issues/9735
as this can be fixed at Illumos only.
Am 11.10.2018 um 20:55 schrieb Omen Wild:
Our AD forest admins just disabled SMBv1 support this morning and our AD
joined OmniOSce boxes (freshly upgraded to r151026w) can no longer talk
to the forest. I have tried removing and re-staging the computer object
in AD but it still won't join.
The command I run:
root@metro-sequoia:~/ # smbadm join -y -u my-admin-account OUR.DOMAIN.EDU
Enter domain password:
Joining OUR.DOMAIN.EDU ... this may take a minute ...
failed to join domain OUR.DOMAIN.EDU
using AD server: oudc6c.our.domain.edu
Failed getting initial credentials. (Wrong password?)
Please refer to the service log for more information.
And yes, I've retried multiple times to make sure I did not mess up my
password.
Full debug log below.
Any clues?
Thanks,
Omen
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 814963
daemon.debug] smbd: join domain: OUR.DOMAIN.EDU
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 727883 daemon.info]
smbd_dc_monitor_refresh
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 288469
daemon.debug] smb_ddiscover_refresh set cfg changed
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 164070
daemon.debug] smbd_dc_monitor: config changed
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 467060
daemon.debug] smb_ddiscover_service: not a domain member
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 243688
daemon.debug] smb_ddiscover_service waiting
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 467060
daemon.debug] smb_ddiscover_service: not a domain member
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 243688
daemon.debug] smb_ddiscover_service waiting
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 510351
daemon.notice] smb_locate_dc status 0xc00000dc
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 199031
daemon.notice] smbd_dc_update: our.domain.edu: locate failed
Oct 11 11:46:40 metro-sequoia.our.domain.edu idmap[433]: [ID 650504
daemon.info] LDAP: oudc4c.our.domain.edu:3268: Local error
Oct 11 11:46:40 metro-sequoia.our.domain.edu idmap[433]: [ID 452651
daemon.error] adutils: ldap_lookup_init failed
Oct 11 11:46:41 metro-sequoia.our.domain.edu smbd[766]: [ID 149131 daemon.info]
smbd: found AD server oudc4c.our.domain.edu
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 931549
daemon.error] ndr_rpc_bind: smbrdr_ctx_new(Srv=oudc4c.our.domain.edu
Dom=OUR.DOMAIN.EDU User=my-admin-account), NETWORK_ACCESS_DENIED (0xc0000$
Oct 11 11:46:42 metro-sequoia.our.domain.edu last message repeated 2 times
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 972153
daemon.error] smbns_krb: getting initial credentials (Cannot determine realm
for host)
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 871254
daemon.error] smbd: failed joining OUR.DOMAIN.EDU (UNSUCCESSFUL)
Oct 11 11:46:42 metro-sequoia.our.domain.edu idmap[433]: [ID 864022
daemon.debug] No domain name specified.
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 727883 daemon.info]
smbd_dc_monitor_refresh
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 288469
daemon.debug] smb_ddiscover_refresh set cfg changed
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 164070
daemon.debug] smbd_dc_monitor: config changed
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 467060
daemon.debug] smb_ddiscover_service: not a domain member
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 243688
daemon.debug] smb_ddiscover_service waiting
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 467060
daemon.debug] smb_ddiscover_service: not a domain member
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 243688
daemon.debug] smb_ddiscover_service waiting
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 510351
daemon.notice] smb_locate_dc status 0xc00000dc
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 199031
daemon.notice] smbd_dc_update: our.domain.edu: locate failed
_______________________________________________
OmniOS-discuss mailing list
OmniOS-discuss@lists.omniti.com
http://lists.omniti.com/mailman/listinfo/omnios-discuss
