Fabrice: I missed your reply, my apologies.
I did end up finding the issue. We have a domain and a child domain and apparently its a problem if you try join the server to both the parent and the child with the same name. I was able to solve the issue by just changing the server name slightly when joining the child domain. All the literature I was able to find on the internet about the error all referenced not having the correct permissions. Other than that the install and configuration process has been pretty smooth. My first impressions of PFv8 have been pretty positive, you guys did some good work. Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor WWW.UMHB.EDU 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 ________________________________________ From: Durand fabrice via PacketFence-users <[email protected]> Sent: Friday, June 1, 2018 9:02 PM To: [email protected] Cc: Durand fabrice Subject: Re: [PacketFence-users] New PF install trouble joining child domain Hello Jake, just one word , sometimes samba/winbind is a nightmare to debug. What i can suggest is to set the log to debug and see if you have more information. Change the file https://github.com/inverse-inc/packetfence/blob/devel/addons/AD/smb.tt and add : log level = 3 Regards Fabrice Le 2018-05-31 à 09:20, Sallee, Jake via PacketFence-users a écrit : > All: > > I'm setting up a new PFv8.1 cluster and I am at the point where I am joining > the individual servers to the domains we have. > > The main / parent domain join went perfectly, but I am unable to join the > child domain. Here is the error : > > Failed to join domain: Failed to set machine spn: Constraint violation > Do you have sufficient permissions to create machine accounts? > > Google-ing the error says to make sure the join account has the correct > privileges, I am assuming it does as the account is a domain admin. > Interestingly enough the computer account DOES get created in AD complete > with GUID and SID. > > The winbindd log is spaming the following MANY time per second: > > May 30 16:11:50 NAC-PFv8-01 winbindd[95903]: [2018/05/30 21:11:50.730648, 0] > ../source3/winbindd/winbindd_cache.c:3170(initialize_winbindd_cache) > May 30 16:11:50 NAC-PFv8-01 winbindd[95903]: initialize_winbindd_cache: > clearing cache and re-creating with version number 2 > May 30 16:11:50 NAC-PFv8-01 winbindd[95903]: [2018/05/30 21:11:50.735636, 0] > ../source3/winbindd/winbindd_util.c:891(init_domain_list) > May 30 16:11:50 NAC-PFv8-01 winbindd[95903]: Could not fetch our SID - did > we join? > May 30 16:11:50 NAC-PFv8-01 winbindd[95903]: [2018/05/30 21:11:50.735686, 0] > ../source3/winbindd/winbindd.c:1404(winbindd_register_handlers) > May 30 16:11:50 NAC-PFv8-01 winbindd[95903]: unable to initialize domain list > > Any ideas? > > Jake Sallee > Godfather of Bandwidth > System Engineer > University of Mary Hardin-Baylor > WWW.UMHB.EDU > > 900 College St. > Belton, Texas > 76513 > > Fone: 254-295-4658 > Phax: 254-295-4221 > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, > https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fSlashdot.org&c=E,1,CodLILYC642eo-JkOokuyzxipLjF-b5YHf-Nwj2gX_ti4fDQtwiJHueLdB4GyNQBeAHcG3zsPGPHlLtOz_JPpepvXZSZ22xrKClzVbe2Au7r_wUWdgzVSZs5&typo=1! > > https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fsdm.link%2fslashdot&c=E,1,U9GcN8QCjqwC_S62mJDE7ct6FIgA8K3Xo5cKtaEmjkAPqFoggCBgqHymk30I8ZqhgoDNigJs3AoaBeITF76f9uRnOXET57SLGIeqY2RHvsM,&typo=1 > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fSlashdot.org&c=E,1,bDnEczOAB_gh6f6zld84Flr6PC501saBCrhT5vnxeZmDpLu2azNaO5i3E4DTeiPmnBLIsm7GmhATLUdku7_i6pDaUi_RAoF762_H7OlkYka9w21mgFDg1UZ0&typo=1! https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fsdm.link%2fslashdot&c=E,1,GU9qSjB6yUU7nN-yB3dlxQA6Kc02v1b7mPCf17g-5DglNZOw0RO7llD6R-T8i6RcOF-T6Ho1sZbUMUgu-Y0jj3u6OQZHqYpsWB49Duv1H58T&typo=1 _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
