You have probally already tried but check the following.
 
I have always used YAST to join a SLES box to a domain.  If you do not have a 
GUI installed, just type yast at the shell.  Under the Network Services section 
is Windows Domain Membership.  Open this.  Type in all the correct information 
and make sure you select "Use for Authentication".  It should join the domain.
 
Also make sure the time of the server you are adding to the domain matchecs the 
domian controler.  On a standard Windows AD setup anything past 5 min. can 
cause problems. 
The command to do this is "net time set -S domain server"

________________________________

From: [EMAIL PROTECTED] on behalf of Lothar Belle
Sent: Wed 3/12/2008 8:18 AM
To: [email protected]
Subject: [Samba] net join fails NT_STATUS_INVALID_COMPUTER_NAME




We want to join out Linux-Server:
SLES 10 SP1 x86 with Samba (samba-client-3.0.24-2.23)
 to our  W2000 Domain.

so i use the command:
   net join -S TQ-NET.DE -UAdministrator
and i get the following Errormessage:
Failed to join domain!
ADS join did not work, falling back to RPC...
[2008/03/12 12:07:29, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(350)
  Error in domain join verification (credential setup failed): 
NT_STATUS_INVALID_COMPUTER_NAME

A Computer-Account was created but a the authentication and access to the 
shares  doesn`t work!

smb.conf:
[global]
        workgroup = TQG
        netbios name = tq-backupsrv-1
        realm = TQ-NET.DE
        security = ADS
        idmap uid = 10000-15000
        idmap gid = 10000-15000
        winbind separator = /
        winbind use default domain = yes
        encrypt passwords = yes
        password server = tq-dc-1.tq-net.de
        client use spnego = no
        domain logons = No
        domain master = No
        wins server = TQ-DC-1.TQ-NET.DE
        wins support = No
[share1]
...
krb5.conf
[libdefaults]
        default_realm = TQ-NET.DE
        clockskew = 300
[realms]
        TQ-NET.DE = {
                kdc = TQ-DC-1.TQ-NET.DE
                default_domain = TQG
                admin_server = TQ-DC-1.TQ-NET.DE
        }
[domain_realm]
        .tq-net.DE = TQ-NET.DE
[appdefaults]
        pam = {
                ticket_lifetime = 1d
                renew_lifetime = 1d
                forwardable = true
                proxiable = true
                retain_after_close = true
                minimum_uid = 0
                try_first_pass = true
                debug = false
        }
krb5.conf

kerberos works fine.



_____________________________________________________________________
Der WEB.DE SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen!
http://smartsurfer.web.de/?mc=100071&distributionid=000000000066

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to