On 02/16/2016 08:57 AM, Maxime RUBINO wrote:
Hi all,

You can found all warning and best practice to join an existing AD to a Samba AD, but, Samba4 doesn't support joining a 2012 AD as a Domain Controller, so... too bad for you if you have an 2012 AD.

https://wiki.samba.org/index.php/Joining_a_Windows_Server_2012_/_2012_R2_DC_to_a_Samba_AD

I don't believe the original poster was doing that.

He was trying to join an existing Windows AD as a Member Server. The question is "How did he do that?"

And, in order to discover his problem, he might need to look at his smb.conf (as Rowland suggests)

(I may be wrong, so we'll have to see what he says)

Le 16/02/2016 14:12, Rowland Penny a écrit :
On 16/02/16 12:26, Steve Ankeny wrote:
On 02/16/2016 02:43 AM, Dennis Moebus wrote:
Hey Steve,

I joined my Samba/OpenChange/Sogo Server to my existing Windows Active
Directory as a member. I followed the offical Native Microsoft Outlook
Configuration Guide from sogo.nu
(http://sogo.nu/files/docs/SOGo%20Native%20Microsoft%20Outlook%20Configuration.pdf).
Installing the software and entering my crendentials is done and
doublechecked.
But everytime I enter the command:

"openchange_newuser --create dmoebus",

I get the following error:

Traceback (most recent call last):
   File "/usr/sbin/openchange_newuser", line 70, in <module>
     lp, creds, opts.firstorg, opts.firstou)
File "/usr/lib/python2.7/dist-packages/openchange/provision.py", line
167, in guess_names_from_smbconf
     raise Exception("Cannot find first exchange organization in %s",
exchangedn)
Exception: ('Cannot find first exchange organization in %s',
'CN=Microsoft Exchange,CN=Services,CN=Configuration,CN=SOGO')

What is wrong? Google has no answers for me...

Thank you!
Dennis

(I am no expert)

It cannot find the "first exchange organization" because it's not querying your existing Microsoft AD

IF you followed the Inverse, "Native Microsoft Outlook Configuration Guide," you installed the Samba & OpenChange packages from Inverse (so, you have the correct packages), but how did you provision Samba?

At the moment you can only provision as a DC.


The Guide tells you to provision as an AD controller. However, that's not going to "fit" your existing AD

At this point, I'd check the configuration options in the Samba Wiki on "joining" as a Member --

https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member

Compare the configuration and setups between the Inverse Guide and the Samba link, and see what you find. You're looking for differences. One of the main issues is DNC: "Which AD DC does your smb.conf point to?"

There are people more expert in both Samba & OpenChange on this list, so maybe someone will see the flaw.

The flaw is probably that he has created a new domain and is now trying to join it to another domain, I don't think this is going to work, it may help to say one way or the other, if the OP was to post the smb.conf from the Sogo machine.


The "first exchange organization" is contained in the database controlling the AD (usually an LDB in Samba), but you're connected to the Microsoft AD, so it has to look there, and it's not looking at the right domain controller.

The question would be, "How did you join your existing Microsoft AD?"



Very good question.

Rowland




--
users@sogo.nu
https://inverse.ca/sogo/lists

Reply via email to