(Agustin, the reply is shortened, because the list wouldn't let me post with another debug 10 output of the join , so don't reply to the last email I sent.)
!! LIST MODERATOR: please disregard my last message since this is shortened significantly. Agustin, Thank you for your reply, I checked out what you said, and unfortunately it is not the case. For one thing, once you join a domain you cannot rename you computer, or else your join is lost. Assuming that is not what you meant, I renamed the server to "myserver" and ran the same test again. (debug 10 output below) I still didn't join, and I still got the improperly formed account name error as before. Also there is nothing in my ADS in the "Computers" container. I will try with SUSE 10.3 and samba 3.0.30 next. Any other ideas? Please help I really need this working with SUSE 10.1 Cheers, -Clayton Here is the output (shortened): myserver:~ # net ads join -U administrator -d 10 cli_session_setup_spnego: got a bad server principal, trying to guess ... [2008/06/12 11:10:34, 5] libads/kerberos.c:kerberos_get_default_realm_from_ccache(384) kerberos_get_default_realm_from_ccache: Trying to read krb5 cache: MEMORY:cliconnect [2008/06/12 11:10:34, 3] libsmb/cliconnect.c:cli_session_setup_spnego(909) cli_session_setup_spnego: guessed server [EMAIL PROTECTED] [2008/06/12 11:10:34, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(621) Doing kerberos session setup [2008/06/12 11:10:34, 1] libsmb/clikrb5.c:ads_krb5_mk_req(602) ads_krb5_mk_req: krb5_get_credentials failed for [EMAIL PROTECTED] (Server not found in Kerberos database) [2008/06/12 11:10:34, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(628) cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Server not found in Kerberos database [2008/06/12 11:10:34, 3] libsmb/cliconnect.c:cli_session_setup(1014) SPNEGO login failed: Server not found in Kerberos database [2008/06/12 11:10:34, 1] libsmb/cliconnect.c:cli_full_connection(1658) failed session setup with NT_STATUS_INVALID_ACCOUNT_NAME [2008/06/12 11:10:34, 1] utils/net.c:connect_to_ipc_krb5(294) Cannot connect to server using kerberos. Error was NT_STATUS_INVALID_ACCOUNT_NAME [2008/06/12 11:10:34, 1] utils/net_ads.c:net_ads_join(1548) call of net_join_domain failed: Improperly formed account name [2008/06/12 11:10:34, 10] intl/lang_tdb.c:lang_tdb_init(138) lang_tdb_init: /usr/lib64/samba/POSIX.msg: No such file or directory Failed to join domain: Improperly formed account name [2008/06/12 11:10:34, 2] utils/net.c:main(1066) return code = -1 myserver:~ # ------------------------------------------------------------------------ --------------------------------------- I had the same problem. I suggest renaming your SUSE box, if you look in your ads under computers you will find your suse is already joined, you may have to reboot your ads machine is order to see it. > Subject: RE: [Samba] Can't join windows 2008 AD with 3.0.30 "Failed to joindomain: Improperly formed account name" > Date: Wed, 11 Jun 2008 14:50:39 -0400 > From: [EMAIL PROTECTED] > To: [email protected] > > Since I didn't get an answer, I am bumping this. > (sorry! I really need an answer for this...) > > > Also here is more relevant info: > OS: SUSE 10.1 x86_64 > > Samba: > samba-3.0.30-0.1.112.x86_64 > samba-client-3.0.30-0.1.112.x86_64 > samba-winbind-3.0.30-0.1.112.x86_64 > > Kerberos: > krb5-1.5.1-23.x86_64 > krb5-client-1.5.1-23.x86_64 > > ------------------------------------------------------------------------ > -------------------- > > > > > > Hi folks, > > My first post here after trolling for a while. > > Here is the issue: > I can't join a Windows 2008 Server Active Directory with 3.0.30. > "Failed to join domain: Improperly formed account name" > > > Judging from the release notes from 3.0.29 etc this was fixed... > Am I incorrect in this assumption? Perhaps I have missed a new > configuration parameter? > > Are the fixes being implemented incrementally -- and if so, what should > I be looking for in future release notes that tells me this is > completely finished and I can join my 2008 domain? > > Regards, > -Clayton H. > > > > > Also, here is my debug level 10 output from a domain join: ###(this has been shortened too) > > > ======================================================================== > ========================================== > A3-A1000007:/etc/samba # net ads join -U administrator%password -d 10 > [2008/06/04 15:44:53, 5] lib/debug.c:debug_dump_status(391) > > cli_session_setup_spnego: got a bad server principal, trying to guess > ... > [2008/06/04 15:44:53, 5] > libads/kerberos.c:kerberos_get_default_realm_from_ccache(384) > kerberos_get_default_realm_from_ccache: Trying to read krb5 cache: > MEMORY:cliconnect > [2008/06/04 15:44:53, 3] > libsmb/cliconnect.c:cli_session_setup_spnego(909) > cli_session_setup_spnego: guessed server > [EMAIL PROTECTED] > [2008/06/04 15:44:53, 2] > libsmb/cliconnect.c:cli_session_setup_kerberos(621) > Doing kerberos session setup > [2008/06/04 15:44:53, 1] libsmb/clikrb5.c:ads_krb5_mk_req(602) > ads_krb5_mk_req: krb5_get_credentials failed for > [EMAIL PROTECTED] (Server not found in Kerberos database) > [2008/06/04 15:44:53, 1] > libsmb/cliconnect.c:cli_session_setup_kerberos(628) > cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Server not > found in Kerberos database > [2008/06/04 15:44:53, 3] libsmb/cliconnect.c:cli_session_setup(1014) > SPNEGO login failed: Server not found in Kerberos database > [2008/06/04 15:44:53, 1] libsmb/cliconnect.c:cli_full_connection(1658) > failed session setup with NT_STATUS_INVALID_ACCOUNT_NAME > [2008/06/04 15:44:53, 1] utils/net.c:connect_to_ipc_krb5(294) > Cannot connect to server using kerberos. Error was > NT_STATUS_INVALID_ACCOUNT_NAME > [2008/06/04 15:44:53, 1] utils/net_ads.c:net_ads_join(1548) > call of net_join_domain failed: Improperly formed account name > [2008/06/04 15:44:53, 10] intl/lang_tdb.c:lang_tdb_init(138) > lang_tdb_init: /usr/lib64/samba/POSIX.msg: No such file or directory > Failed to join domain: Improperly formed account name > [2008/06/04 15:44:53, 2] utils/net.c:main(1066) > return code = -1 > > > > > > > > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba > > No virus found in this incoming message. > Checked by AVG. > Version: 8.0.100 / Virus Database: 269.24.6/1482 - Release Date: > 6/4/2008 7:10 AM > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba ________________________________ Now you can invite friends from Facebook and other groups to join you on Windows Live(tm) Messenger. Add them now! <https://www.invite2messenger.net/im/?source=TXT_EML_WLH_AddNow_Now> No virus found in this incoming message. Checked by AVG. Version: 8.0.100 / Virus Database: 270.3.0/1499 - Release Date: 6/12/2008 7:13 AM -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
