hello,
I have a wiered issue, some time when I run net ads join -U username,
some times I have see this error message, and some time it shows as
success. In between the error messages and success result, their are no
changes to any configuration, not sure what is causing this issue.
# net ads
We have a couple oracle RAC servers that we install samba/winbind on. These
servers require multiple NIC's / IP's.
The problem is when we do net ads join it updates windows DNS and really
screws us up because seven IP's get put into DNS, all tied to the same host,
including the interconnect
Been there:
1. Compile Samba by yourself, remove WITH_DNS_UPDATE flag.
2. Disallow allow insecure update from DNS server.
3. Edit /etc/hosts, use shortname for your Samba server, then upon net ads
join
it will complain domain name not found hence will not update DNS.
Cheers
-David
2012/2/4
I have a couple of Samba servers set up on two systems running Red Hat
(samba3x-3.5.4-0.70.el5_6.1). I have samba authenticating against
Active Direct, which works fine, when I do net ads join it accepts
machine. The problem is, around an hour or so later, the join is
dropped and users cannot
Hello,
I would like to know where samba takes the computer name to join the
AD domain. Is it from classic computer name DNS resolution?
regards,
Fred
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
I believe it takes the name from either the,
netbios name =
or
server string = x
in the smb.conf file.
On 05/27/2011 05:50 AM, fsos...@gmail.com wrote:
Hello,
I would like to know where samba takes the computer name to join the
AD domain. Is it from classic computer name DNS
From: fsos...@gmail.com fsos...@gmail.com
Date: Fri, 27 May 2011 11:50:48 +0200
I would like to know where samba takes the computer name to join the
AD domain. Is it from classic computer name DNS resolution?
The computer name is taken from classic hostname by default.
netbios name parameter
thanks a lot
On 27 May 2011 16:01, TAKAHASHI Motonobu mo...@monyo.com wrote:
From: fsos...@gmail.com fsos...@gmail.com
Date: Fri, 27 May 2011 11:50:48 +0200
I would like to know where samba takes the computer name to join the
AD domain. Is it from classic computer name DNS resolution?
The
Hello,
I folowed this tutorial:
http://ubuntuforums.org/showthread.php?p=7863547#post7863547 and everything
works fine, but sometimes when i restart my machine is necessary to join
again using the command net ads join
It's possible to fix this?
Thanks,
Stacker
--
To unsubscribe from this
Does anyone know what produces this error ?
Everything seems to work o.k. , but this has introduced itself when the
first windows 2008 PDC was installed.
net ads join createupn=nfs/hostname.company@company.net -U superuser
Enter superuser's password:
Using short domain name -- DOMAIN
I'm having trouble getting a host to join an ADS domain/realm. I have smb.conf
set correctly, with the workgroup, realm, and security = ads specified.
However, when I try to join with the command: net ads join -U Administrator, I
simple get the message Aborted and it does not join the domain.
On 2010/05/27 at 08:48, Nick Couchman nick.couch...@seakr.com wrote:
I'm having trouble getting a host to join an ADS domain/realm. I have
smb.conf set correctly, with the workgroup, realm, and security = ads
specified. However, when I try to join with the command: net ads join -U
Hello,
I'm just wondering if there is a way to disable the DNS update when doing
net ads join. Right now is killing us because the servers have private
IPs and its updating our main AD server with those IPs and all the
interfaces (adding like 10 or 20 records for the same machine different
Hi,
my windows folks migrated to AD 2008 R2, resulting in the following error
message when trying to join the domain:
[HOST] /etc $ /opt/csw/bin/net ads join -U USER
Enter USER's password:
[2009/07/01 11:51:28, 0] libads/sasl.c:ads_sasl_spnego_bind(819)
kinit succeeded but
On Wed, Jul 01, 2009 at 12:03:28PM +0200, christoph.be...@desy.de wrote:
Hi,
my windows folks migrated to AD 2008 R2, resulting in the following error
message when trying to join the domain:
[HOST] /etc $ /opt/csw/bin/net ads join -U USER
Enter USER's password:
[2009/07/01 11:51:28, 0]
Heyho Guenther,
thanks for the fast reply, 'client ldap sasl wrapping = sign' did the
trick :D
cheers
christoph
On Wed, 1 Jul 2009, Guenther Deschner wrote:
On Wed, Jul 01, 2009 at 12:03:28PM +0200, christoph.be...@desy.de wrote:
Hi,
my windows folks migrated to AD 2008 R2, resulting in
On 7/1/2009, christoph.be...@desy.de (christoph.be...@desy.de) wrote:
my windows folks migrated to AD 2008 R2
Interesting... seeing as its not even released yet...
--
Best regards,
Charles
--
To unsubscribe from this list go to the following URL and read the
instructions:
Environment: Sun Solaris 9 sparc
Software: Samba 3.3.3, KRB5-1.6.3, OpenLDAP-2.4.11
Situation:
I've been able to verify that samba is compile corrected by issuing the
following commands:
Smbd -b|grep LDAP
Smbd -b|grep KRB
Smbd -b|grep ADS
Smbd -b|grep WINBIND
I've been able to
Hello,
I try to join a Samba 3.2 server on RHEL 4 to AD using
net ads join -d 2 -U myacco...@domain.com
It seems that the net utility does not 'like' a full qualified userid
any longer. I was able to join using samba v3.09 and v3.025 but with
3.2.8 I'm only able to join submitting a plain
I try to join a Samba 3.2 server on RHEL 4 to AD using
net ads join -d 2 -U myacco...@maindom.com
The domain to join the samba server should join to is a subdomain of
MAINDOM.COM, call it SUB1.MAINDOM.COM.
The interesting part of smb.conf is:
[global]
workgroup = SUB1
security = ADS
Hi,
I have a question about the machine account when one does net ads join -U
[EMAIL PROTECTED]
when I join a machine to the domain, the machine account that gets created
has a non-expiring password. This is only a problem for the security team
that monitors our domain, they frown on any
Hi,
I am trying to join a samba server to my AD directory but if fails:
[EMAIL PROTECTED] postfix]# net ads join -U [EMAIL PROTECTED]
[EMAIL PROTECTED]'s password:
[2008/09/04 15:12:45, 0] libads/kerberos.c:ads_kinit_password(228)
kerberos_kinit_password [EMAIL PROTECTED] failed: Cannot
Hi,
it seems that all is working perfectly, but if start an net ads join i
get the message DNS Update failed ! .
What is the consequence if i dont care about this message ? Is the Samba
Server (ADS member) only not registered in the ADS DNS tree ?
Buy,
Andy
--
To unsubscribe from this
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Andreas Ladanyi wrote:
Hi,
it seems that all is working perfectly, but if start an net ads join i
get the message DNS Update failed ! .
What is the consequence if i dont care about this message ? Is the Samba
Server (ADS member) only not
I've been able to use security = ads in smb.conf, and connect OK,
but it must be falling back to domain. When I run net ads join
I get the error (debug trace below):
ads_connect: No logon servers
Here is my krb5.conf:
[logging]
default = FILE:/var/log/krb5libs.log
kdc =
D G Teed wrote:
I've been able to use security = ads in smb.conf, and connect OK,
but it must be falling back to domain. When I run net ads join
I get the error (debug trace below):
ads_connect: No logon servers
Here is my krb5.conf:
[logging]
default = FILE:/var/log/krb5libs.log
Thanks very much, Douglas. That did the trick.
I had not understood what realm represented in a dns
style domain.
It is also confusing that one lists a realm section,
defining it...
BEER = {
kdc = ADC1.AD.BEERU.CA
}
But then when providing the realm name in smb.conf, the
handle isn't BEER,
Douglas VanLeuven wrote:
D G Teed wrote:
I've been able to use security = ads in smb.conf, and connect OK,
but it must be falling back to domain. When I run net ads join
I get the error (debug trace below):
ads_connect: No logon servers
Here is my krb5.conf:
[logging]
default =
D G Teed wrote:
Thanks very much, Douglas. That did the trick.
I had not understood what realm represented in a dns
style domain.
It is also confusing that one lists a realm section,
defining it...
BEER = {
kdc = ADC1.AD.BEERU.CA
}
Sorry, missed that one too. Should be
Hi all,
I want to configure a samba server (3.0.25b) with krb5-1.6.2,
openldap-2.3.37 and db-4.6.18 for single sign-on purpose. I have some
questions.
1. Is the AD Administrator account for Samba to kinit and net join the
AD only ?
2. Can I use a common user with Create Computer Objects
Jeff Lee wrote:
Hi all,
I want to configure a samba server (3.0.25b) with krb5-1.6.2,
openldap-2.3.37 and db-4.6.18 for single sign-on purpose. I have some
questions.
1. Is the AD Administrator account for Samba to kinit and net join the
AD only ?
2. Can I use a common user with Create
Le Wednesday 04 July 2007 09:30:29 Francesco Tonucci, vous avez écrit :
Hello,
I'm trying to join a samba server to a w2k domain.
Now I have removed all samba and kerberos software from the machine to
reset configuration.
Then I have executed net ads testjoin to see what happened (I have
Hello,
I'm trying to join a samba server to a w2k domain.
Now I have removed all samba and kerberos software from the machine to reset
configuration.
Then I have executed net ads testjoin to see what happened (I have already
joined the machine to the domain).
It returned the following messages:
Hi,
I have a problem joining my Linux servers to my AD with Samba 3.0.22
I have tested with various distros :
Suse 10.2, smb 3.0.23d
Debian Etch, smb 3.0.24
but always get the same error message :
debian:~# net ads join -U administrateur -S s-dc-acms
administrateur's password:
[2007/05/30
Hi!
I'm having the same issue: Linux Box with RedHat 3 joining a windows 2003
AD. When doing net ads join the system reports
[2007/03/12 17:27:36, 5] libads/kerberos.c:get_service_ticket(367)
get_service_ticket: krb5_get_credentials for [EMAIL PROTECTED] enctype 16
failed: KDC has no support
Hi!
I'm having the following issue: Linux Box with RedHat 3 joining a windows
2003 AD.
When doing net ads join the system reports
[2007/03/12 17:27:36, 5] libads/kerberos.c:get_service_ticket(367)
get_service_ticket: krb5_get_credentials for [EMAIL PROTECTED] enctype 16
failed: KDC has no
I am able to get a kerberos ticket with kinit. When I try to net ads join, it
seems to loop. In running net ads join in -d 10,
I found that it tries enctypes 18,17,16,and 2 and then repeats, over and over.
It does not seem to work on any of these. I'm
trying to get it to join a win2k3
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,
I just tried to join my SLES9 (Suese Linux Enterprise Server 9) to my
ads. I follow a mixture of the howtos [1], [2], [3]. Everything works
fine (kinit gives me a valid kerberos ticket), but the
`net ads join -U $DOMAIN\\$USER` command segfaults.
Have you checked if your clock are in sync with the Win2k Server?
Due to the kerberos, time out of sync by 5 minutes report errors to connect.
On 10/25/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
Hi all,
I'am trying to join ADS an W2K server. This server was already joined,
but after
I'm not sure that the problem is with net ads join but I'm in desperate
need of help either way.
Using smb Version 3.0.23a-1.fc4.1
I do a net ads join I get the below error:
[EMAIL PROTECTED] tmp]# net ads join -U [EMAIL PROTECTED]
[EMAIL PROTECTED]'s password:
Using short domain name -- MVP
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Brian D. McGrew wrote:
I'm not sure that the problem is with net ads join but I'm in desperate
need of help either way.
Using smb Version 3.0.23a-1.fc4.1
I do a net ads join I get the below error:
[EMAIL PROTECTED] tmp]# net ads join -U
Can anyone shed some light on this error? I can't seem to find any
information as to why it is failing. Thanks.
USTR-MINT-A-1:~ # net ads join United
States\Tredyffrin\Resources\Servers -U trimblrd
trimblrd's password:
Failed to pre-create the machine object in OU United
I get the same error either way.
-Original Message-
From: Howard Wilkinson [mailto:[EMAIL PROTECTED]
Sent: Friday, July 14, 2006 11:16 AM
To: Trimble, Ronald D; samba@lists.samba.org
Subject: RE: [Samba] NET ADS JOIN error
Check that the backslashes are not being interpolated
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Trimble, Ronald D wrote:
Can anyone shed some light on this error? I can't seem to find any
information as to why it is failing. Thanks.
USTR-MINT-A-1:~ # net ads join United
States\Tredyffrin\Resources\Servers -U trimblrd
trimblrd's
Fax: +44 20 79230110 Mobile: +44 7980 639379
Company Email: [EMAIL PROTECTED] Website: http://www.cohtech.com
http://www.cohtech.com/
From: [EMAIL PROTECTED] on behalf of Trimble, Ronald D
Sent: Fri 2006-07-14 16:06
To: samba@lists.samba.org
Subject: [Samba] NET
PROTECTED] On
Behalf Of Robert J. Collins
Sent: Monday, January 23, 2006 2:03 PM
To: samba@lists.samba.org
Subject: [Samba] net ads join segmentation fault
On FreeBSD 6.0-RELEASE-p2 using samba-3.0.21a,1 the net command seg
faults. Does anyone know what is going on?
Thanks
-rcollins
- net
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Robert J. Collins wrote:
On FreeBSD 6.0-RELEASE-p2 using samba-3.0.21a,1 the
net command seg faults. Does anyone know what is going
on?
Can you get a backtrace from gdb after building Samba
with the --enable-debug option (or just the -g gcc
On FreeBSD 6.0-RELEASE-p2 using samba-3.0.21a,1 the net command seg
faults. Does anyone know what is going on?
Thanks
-rcollins
- net ads join -Uadministrator -d 10 -
[2006/01/23 12:36:59, 5] lib/debug.c:debug_dump_status(368)
INFO: Current debug levels:
all: True/10
tdb:
Hi,
I have just installed Mandrake linux x84_64 (64 bit version) on my new dell
poweredge server (1850 SMP)
I am getting core dumps when trying to join the 2003 AD domain.
ie. I run
net ads join [EMAIL PROTECTED]
running kinit worked ok.
I am running samba version 3.0.20
Good morning all:
When I do a net ads join from FC4 I get the following output and I'm not
quite sure what to make of it. Also, after I do a kinit, net ads join
and smb restart all my windows clients can connect fine. After I reboot
the server, the windows clients can not connect until I do
Good morning all:
When I do a net ads join from FC4 I get the following output and I'm not
quite sure what to make of it. Also, after I do a kinit, net ads join
and smb restart all my windows clients can connect fine. After I reboot
the server, the windows clients can not connect until I do
Can someone help me because I don't how this ha+ppening without messing it ?
/var/log/samba/log.wb-COMPANY
cli_rpc_open failed on pipe \NETLOGON to machine SRV01. Error was Write
error: Broken pipe
[2005/10/27 12:15:01, 0] rpc_client/cli_pipe.c:cli_rpc_close(1767)
cli_rpc_open failed on pipe
hello,
i am wondering, when i try to follow the ADS 2003, samba can't join completly.
The join ends with: ads_machine_password:Message stream modified.
When i start 'net ads join' with debugging i got an error:
[2005/09/24 18:51:49, 1] libads/krb5_setpw.c:parse_setpw_reply(237)
Got error
I have seen that reinstalling the samba works for me... dont know why
although... I had taken the binaries from the Samba Site..
On 8/27/05, Gerald (Jerry) Carter [EMAIL PROTECTED] wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Guille wrote:
| Hi,
|
| You are not alone with
I have seen that reinstalling the samba works for me... dont know why
although... I take the binaries from the Samba Site..
+++ Gerald (Jerry) Carter [Sat, Aug 27, 2005 at 10:41:46AM -0500]:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Guille wrote:
| Hi,
|
| You are not alone with
Of
Theodore Jencks
Sent: Friday, August 26, 2005 11:58 AM
To: samba@lists.samba.org
Subject: RE: [Samba] net ads join error
So now it looks like I can join the domain however I get the following
output. Seems like there might be an issue with samba-3.0.20 and the
new GCC 4 and glibc.
Any idea's
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Guille wrote:
| Hi,
|
| You are not alone with regards to this error message joining FC4 to Win2k
| ADS.
| I got this after I joined.
It's bugs in the e2fsprogs + krb5 libs shipped on FC4.
You'll have to talk to the Fedora folks to get this fixed.
Compiling version 3.0.20 from source on RedHat Fedora Core 4 everything
seems to go smoothly. However upon trying to join a 2000 domain with
the following command net ads join -U Administrator%Password 'OU' I
get the following error:
[2005/08/26 09:43:56, 0] utils/net_ads.c:ads_startup(191)
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Theodore Jencks wrote:
Compiling version 3.0.20 from source on RedHat Fedora Core 4 everything
seems to go smoothly. However upon trying to join a 2000 domain with
the following command net ads join -U Administrator%Password 'OU' I
get the
] net ads join error
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Theodore Jencks wrote:
Compiling version 3.0.20 from source on RedHat Fedora Core 4
everything
seems to go smoothly. However upon trying to join a 2000 domain with
the following command net ads join -U Administrator%Password
in smb.conf add line
log level = 10
then restart nmb, smb and winbind.
-Original Message-
From: Theodore Jencks [mailto:[EMAIL PROTECTED]
Sent: Friday, August 26, 2005 1:03 PM
To: samba@lists.samba.org
Subject: RE: [Samba] net ads join error
Where would I find the log for this? How
join error
in smb.conf add line
log level = 10
then restart nmb, smb and winbind.
-Original Message-
From: Theodore Jencks [mailto:[EMAIL PROTECTED]
Sent: Friday, August 26, 2005 1:03 PM
To: samba@lists.samba.org
Subject: RE: [Samba] net ads join error
Where would I find the log
into the
samba lmhosts file.
Regards,
Theo
[EMAIL PROTECTED] samba]# net ads join -U tjencks%PASSWD
Using short domain name -- HQ
Joined 'THEO' to realm 'HQ.NAVIS.NET'
*** glibc detected *** net: free(): invalid pointer: 0x007eedb0 ***
=== Backtrace: =
/lib/libc.so.6[0x415124]
/lib
Hi all,
is it possible at all to get Samba 3 on AIX 5.2 to join a Win 2003 Domain
natively ? All the precompiled versions do not have AD Support and having AIX
krb5 installed (let alone using --with-ads)is enough to make a compile run fail
- both 3.0.14 and 3.0.20rc2. Might Heimdal solve this ?
[EMAIL PROTECTED] wrote:
Hi all,
is it possible at all to get Samba 3 on AIX 5.2 to join a Win 2003
Domain natively ? All the precompiled versions do not have AD Support
and having AIX krb5 installed (let alone using --with-ads)is enough
to make a compile run fail - both 3.0.14 and
Dear Samba-Friends,
You are my last hope to solve my samba-problem. I read so many manpages and
everywhere i see the same to join an ADS-Domain:
net ads join -UAdministrator%password
All i want, is to join to a Windows2003 ADS Domain WITHOUT knowing the admin
passwort of
the Windows Domain
Hi All,
For the past few months I've been running a SUSE 9.2 server here
(mostly as an app server) which was a member of an AD domain
(w2k3 domain controller.) I used winbind to enable domain members
to log into the box, all was well.
This week the w2k3 server had some MS security patches
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Rex Dieter wrote:
| I just wanted to share my frustrations with trying
| to use samba to join linux machines to our AD
| (so I could use pam_winbind primarily). I'm
| using Red Hat Enterprise 4 boxes, with samba-3.0.14a,
| krb5-libs-1.3.4-12,
Gerald (Jerry) Carter wrote:
Rex Dieter wrote:
| Now, I've found that the
| $ net ads join
| command(*) always says it succeeds joining the domain,
| but a subsequent
| $ wbinfo -t
| about 75% of the time yields an error:
| NT_STATUS_ACCESS_DENIED
|
| If I re-run those 2 commands repeatedly, I
I just wanted to share my frustrations with trying to use samba to join
linux machines to our AD (so I could use pam_winbind primarily). I'm
using Red Hat Enterprise 4 boxes, with samba-3.0.14a,
krb5-libs-1.3.4-12, kernel-2.6.9-5.0.5.EL (I tried Fedora Core 3 too,
with similar results). I
On Thursday 26 May 2005 18:50, Rex Dieter wrote:
Here's one that's got me baffled. No such file or directory?
# net ads join -U'AD-Administrator'
AD-Administrator's password:
[2005/05/26 08:15:00, 0] utils/net_ads.c:ads_startup(191)
ads_connect: No such file or directory
I've been
Here's one that's got me baffled. No such file or directory?
# net ads join -U'AD-Administrator'
AD-Administrator's password:
[2005/05/26 08:15:00, 0] utils/net_ads.c:ads_startup(191)
ads_connect: No such file or directory
I've been testing 'net ads join' to our AD all week, but I've not
]
Sent: 11 April 2005 16:57
To: Penny Willisson
Subject: RE: [Samba] net ads join fails
Try that, it is working for me
[logging]
default = FILE:/var/log/krb5/libs.log
kdc = FILE:/var/log/krb5/kdc.log
admin_server = FILE:/var/log/krb5/admin.log
[libdefaults]
ticket_lifetime = 24000
default_realm
-Original Message-
From: Gordon Hopper [mailto:[EMAIL PROTECTED]
Sent: 09 April 2005 00:23
To: Penny Willisson
Subject: RE: [Samba] net ads join fails
You might need to add some entries to your krb5.conf file. for example:
[realms]
ellisonslegal.com = {
kdc = domain.controller.ellisonslegal.com:88
you have the updated link?
Thanks for your continued help.
Penny
-Original Message-
From: Gordon Hopper [mailto:[EMAIL PROTECTED]
Sent: 09 April 2005 00:23
To: Penny Willisson
Subject: RE: [Samba] net ads join fails
You might need to add some entries to your krb5.conf file
Message-
From: Penny Willisson
Sent: 11 April 2005 14:43
To: 'Gordon Hopper'; '[EMAIL PROTECTED]'
Cc: Dimitri Yioulos; samba@lists.samba.org
Subject: RE: [Samba] net ads join fails
I have recreated my dns pointers without success and I think my krb5.conf file
is configured correctly. First
= true
proxiable = false
retain_after_close = false
minimum_uid = 0
}
Thanks
-Original Message-
From: Penny Willisson
Sent: 11 April 2005 14:43
To: 'Gordon Hopper'; '[EMAIL PROTECTED]'
Cc: Dimitri Yioulos; samba@lists.samba.org
Subject: RE: [Samba] net ads join fails
I have
Sorry the same problem is still happening.
Thanks
-Original Message-
From: Dimitri Yioulos [mailto:[EMAIL PROTECTED]
Sent: 11 April 2005 16:38
To: Penny Willisson
Subject: Re: FW: [Samba] net ads join fails
OK, this is closer.
Change [realms] kpasswd_server to admin_server.
I also
On Mon, 2005-04-11 at 16:51 +0100, Penny Willisson wrote:
Sorry the same problem is still happening.
---
it would probably help if you gave us more info...started over...
what is output?
cat /etc/resolv.conf
cat /etc/krb5.conf
terminal output of
kinit Administrator
and/or
kinit [EMAIL
The cmd 'net ads join -U username' dies with 'Segmentation fault' for
our PROD ADS environment, however works fine in our DEV ADS environment!
The only [Linux] configuration change between the two environments is
update SAMBA and Kerberos config to read 'ADS' vs 'ADSDEV' and change
the domain
: 08 April 2005 13:30
To: samba@lists.samba.org
Subject: Re: [Samba] net ads join fails
On Friday 08 April 2005 07:46 am, Penny Willisson wrote:
Hi
I have created the machine account on the AD server and did this
logged in
as Administrator so that should mean that the Administrator
] net ads join fails
[2005/04/05 15:11:44, 3] libsmb/clikrb5.c:ads_krb5_mk_req(381)
ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or directory)
[2005/04/05 15:11:44, 0] libads/kerberos.c:ads_kinit_password(146)
kerberos_kinit_password [EMAIL PROTECTED] failed: Unknown code
PROTECTED]
Sent: 06 April 2005 05:28
To: Penny Willisson
Subject: Re: [Samba] net ads join fails
[2005/04/05 15:11:44, 3] libsmb/clikrb5.c:ads_krb5_mk_req(381)
ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or directory)
[2005/04/05 15:11:44, 0] libads/kerberos.c:ads_kinit_password
To: samba@lists.samba.org
Subject: Re: [Samba] net ads join fails
On Friday 08 April 2005 07:46 am, Penny Willisson wrote:
Hi
I have created the machine account on the AD server and did this logged in
as Administrator so that should mean that the Administrator account has the
correct permissions
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
Dimitri Yioulos
Sent: 08 April 2005 13:30
To: samba@lists.samba.org
Subject: Re: [Samba] net ads join fails
On Friday 08 April 2005 07:46 am, Penny Willisson wrote:
Hi
I have created the machine
I am trying to connect to an ADS domain and it is failing all the time.
I am running SuSE Linux 9.0 with Samba 3.0.13 and have configured Samba with
ldap and heimdal kerberos
Attached is my debug level 10 error log created when the join is attempted.
I would appreciate any advice on solving
Sorry attachment was removed - I have now pasted log file here.
[2005/04/05 15:11:44, 5] lib/debug.c:debug_dump_status(366)
INFO: Current debug levels:
all: True/10
tdb: False/0
printdrivers: False/0
lanman: False/0
smb: False/0
rpc_parse: False/0
rpc_srv: False/0
* [EMAIL PROTECTED] schrieb am 10.02.05 um 21:35 Uhr:
Problem: I have an account that allows me to join an AD domain, this works
fine from any win box. However it fails with ads_add_machine_acct
(client_name): Insufficient access when I do a net ads join from a linux
box. To get samba to
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Marc Schiffbauer wrote:
| Problem: I have an account that allows me to join
| an AD domain, this works fine from any win box. However
| it fails with ads_add_machine_acct (client_name):
| Insufficient access when I do a net ads join from a linux
|
Problem: I have an account that allows me to join an AD domain, this works
fine from any win box. However it fails with ads_add_machine_acct
(client_name): Insufficient access when I do a net ads join from a linux
box. To get samba to join the domain, I have to use an account with full
domain
This is more than likely a rookie config problem but when I try to add
the server to the ADS domain with:
$net ads join
I get:
[*DATESTAMP*] libads/kerberos.c:get_service_tickets(335)
get_service_ticket: kerberos_kinit_password
[EMAIL PROTECTED] failed: Preauthentication failed
Segmentation
Resending, as I used wrong sender and it doesn't seem to have appeared
on the list.
The problem is sort of solved...
First, I tried stopping smb and winbind and cleaning out all cache files
(/var/cache/samba).
Then joining worked fine for a while. Then it didn't. Whenever it didn't
I got those
Sort of solved...
First, I tried stopping smb and winbind and cleaning out all cache files
(/var/cache/samba).
Then joining worked fine for a while. Then it didn't. Whenever it didn't
I got those weird messages with [EMAIL PROTECTED]@KLIENT.UIB.NO
again.
Now that problem seems to be fixed, but
birger wrote:
net ads join -U [EMAIL PROTECTED] 'Klienter\IT\MatNat\IFT\Samba
Servers\IT-gruppen'
[EMAIL PROTECTED]'s password:
[2004/12/02 15:34:36, 0] libads/ldap.c:ads_add_machine_acct(1367)
ads_add_machine_acct: Host account for iftsmb100 already exists -
modifying old account
Using short
After a lot of different problems and variations of krb5.conf and
samba.conf files I am currently stuck with the following error trying to
join a domain
net ads join -U [EMAIL PROTECTED] 'Klienter\IT\MatNat\IFT\Samba
Servers\IT-gruppen'
[EMAIL PROTECTED]'s password:
[2004/12/02 15:34:36, 0]
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
~ /usr/bin/net ads join -Udennisb
dennisb password:
[2004/11/02 17:31:56, 0] libads/ldap.c:ads_add_machine_acct(1006)
~ Host account for if-srv-hos1 already exists - modifying old account
[2004/11/02 17:31:56, 0] libads/ldap.c:ads_join_realm(1342)
~
On Tue, 02 Nov 2004 14:34:15 -0800, Tom Dickson [EMAIL PROTECTED] wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
~ /usr/bin/net ads join -Udennisb
dennisb password:
[2004/11/02 17:31:56, 0] libads/ldap.c:ads_add_machine_acct(1006)
~ Host account for if-srv-hos1 already exists -
Hi all.
I'm having a problem joining an ADS domain with Samba 3.0.5.
The machine account has been set up on the server in a similar way to
another system which has joined successfully. The error I'm getting
is kinda vague, and I have no idea what it means:
---
[2004/07/28 16:32:36, 3]
Hi Aaron,
we've just identified this problem and thought you may be interested if you
haven't resolved
this already. The bind is failing because the admin account being used to join the
domain is a
member of too many groups (waiting to hear from M$ what constitutes too many) and as a
I believe this is a bug as I have posted exactly the same problem to this
list already including some debug info, nobody replied though
I have contacted Andrew Bartlett on this with some debug information and
am waiting for a reply. As its not just me I'll raise a bug in bugzilla,
1 - 100 of 138 matches
Mail list logo
