Hi Folks,
A little update :) I succesfully joined to the domain with this command: samba-tool domain join test.domain.lan DC -UAdministrator --realm=domainc01.test.domain.lan --dns-backend=BIND9_DLZ For some reason i had to write the master§s fqdn name into the --realm section. Btw, it's weird now. when i try to run the kinit administrator command on the "slave" server I've got the kinit: krb5_get_init_creds: Clock skew too great error. It's weird becaouse i ran ntpdate sync on both machine :) Cheers, Robert 2013/5/23 Sandbox <[email protected]> > Hi, > > ldapsearch is working perfectly, I accidentaly forgot to the cn=user > before dn= settings :/ > > Robert > > > 2013/5/23 Sandbox <[email protected]> > >> Hi >> >> I did the ldapsearch query the result is: >> >> ldap_bind: Invalid credentials (49) >> additional info: Simple Bind Failed: NT_STATUS_LOGON_FAILURE >> >> Simple nmap result: >> >> 22/tcp open ssh >> 53/tcp open domain >> 88/tcp open kerberos-sec >> 135/tcp open msrpc >> 139/tcp open netbios-ssn >> 389/tcp open ldap >> 445/tcp open microsoft-ds >> 464/tcp open kpasswd5 >> 636/tcp open ldapssl >> 1024/tcp open kdm >> 3268/tcp open globalcatLDAP >> 3269/tcp open globalcatLDAPssl >> >> >> ldapsearch query with debug level 1 >> >> ldap_create >> ldap_url_parse_ext(ldap://domainc01.test.domain.lan) >> Enter LDAP Password: >> ldap_sasl_bind >> ldap_send_initial_request >> ldap_new_connection 1 1 0 >> ldap_int_open_connection >> ldap_connect_to_host: TCP domainc01.test.domain.lan:389 >> ldap_new_socket: 3 >> ldap_prepare_socket: 3 >> ldap_connect_to_host: Trying 10.48.16.150:389 >> ldap_pvt_connect: fd: 3 tm: -1 async: 0 >> ldap_open_defconn: successful >> ldap_send_server_request >> ber_scanf fmt ({it) ber: >> ber_scanf fmt ({i) ber: >> ber_flush2: 63 bytes to sd 3 >> ldap_result ld 0x7f99785fd490 msgid 1 >> wait4msg ld 0x7f99785fd490 msgid 1 (infinite timeout) >> wait4msg continue ld 0x7f99785fd490 msgid 1 all 1 >> ** ld 0x7f99785fd490 Connections: >> * host: domainc01.test.domain.lan port: 389 (default) >> refcnt: 2 status: Connected >> last used: Thu May 23 07:58:13 2013 >> >> >> ** ld 0x7f99785fd490 Outstanding Requests: >> * msgid 1, origid 1, status InProgress >> outstanding referrals 0, parent count 0 >> ld 0x7f99785fd490 request count 1 (abandoned 0) >> ** ld 0x7f99785fd490 Response Queue: >> Empty >> ld 0x7f99785fd490 response count 0 >> ldap_chkResponseList ld 0x7f99785fd490 msgid 1 all 1 >> ldap_chkResponseList returns ld 0x7f99785fd490 NULL >> ldap_int_select >> read1msg: ld 0x7f99785fd490 msgid 1 all 1 >> ber_get_next >> ber_get_next: tag 0x30 len 55 contents: >> read1msg: ld 0x7f99785fd490 msgid 1 message type bind >> ber_scanf fmt ({eAA) ber: >> read1msg: ld 0x7f99785fd490 0 new referrals >> read1msg: mark request completed, ld 0x7f99785fd490 msgid 1 >> request done: ld 0x7f99785fd490 msgid 1 >> res_errno: 49, res_error: <Simple Bind Failed: NT_STATUS_LOGON_FAILURE>, >> res_matched: <> >> ldap_free_request (origid 1, msgid 1) >> ldap_parse_result >> ber_scanf fmt ({iAA) ber: >> ber_scanf fmt (}) ber: >> ldap_msgfree >> ldap_err2string >> ldap_bind: Invalid credentials (49) >> additional info: Simple Bind Failed: NT_STATUS_LOGON_FAILURE >> ldap_free_connection 1 1 >> ldap_send_unbind >> ber_flush2: 7 bytes to sd 3 >> ldap_free_connection: actually freed >> >> >> As I see the member server could connect to the exisiting samba server >> and there is a password problem. >> It is weird cos I double checked the password and it should be correct :/ >> >> Cheers, >> Robert >> >> >> >> >> 2013/5/22 Marc Muehlfeld <[email protected]> >> >>> Hello Robert, >>> >>> Am 22.05.2013 15:56, schrieb Sandbox: >>> >>>> Finding a writeable DC for domain 'test.domain.lan' >>>> Found DC domainc01.test.domain.lan >>>> Password for [WORKGROUP\Administrator]: >>>> Failed to bind - LDAP error 49 LDAP_INVALID_CREDENTIALS - >>>> <SASL:[GSS-SPNEGO]: NT_STATUS_LOGON_FAILURE> <> >>>> Failed to connect to 'ldap://domainc01.test.domain.**lan' with backend >>>> 'ldap': (null) >>>> ... >>>> >>> >>> >>> Just some toughts on that: >>> >>> * Do you have any special characters in your password? E. g. german >>> umlauts are making trouble here if set on windows and when the password is >>> validated from unix services against AD. >>> >>> >>> >>> * Can you do a ldapsearch from the new machine in the existing directory >>> or is the access there also denied? >>> >>> # ldapsearch -h domainc01.test.domain.lan -b dc=test,dc=domain,dc=lan >>> -LLL -D cn=Administrator,..... -W >>> >>> >>> >>> * Kerberos settings are all fine and you can get a ticket? >>> >>> https://wiki.samba.org/index.**php/Samba4/HOWTO/Join_a_** >>> domain_as_a_DC#Getting_ready_**for_joining_Samba_as_a_DC_to_** >>> an_existing_domain<https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC#Getting_ready_for_joining_Samba_as_a_DC_to_an_existing_domain> >>> >>> >>> Regards, >>> Marc >>> >> >> > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
