LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 12-30-2015, 10:01 PM   #1
shaana2khan
Member
 
Registered: Nov 2012
Posts: 46

Rep: Reputation: Disabled
How to join window active directory domain in centos 7


[root@imp ~]# kinit username@domain.local
Password for nitan.kumar@impressico.local:
kinit: KDC reply did not match expectations while getting initial credentials

2nd error:-
[root@imp ~]# /usr/bin/net join -w domain -S ad.domain.local -U ad username
Enter userpassword password:
Failed to join domain: failed to set machine kerberos encryption types: Insufficient access
ADS join did not work, falling back to RPC...
Enter User passsword password:
Failed to join domain: failed to lookup DC info for domain 'IMPRESSICO' over rpc: Logon failure

I did Google lot but there are few errors messages answer aren't available on Google.

Please send me Ur l or any type of help which can help to sort it out.
This is my first post and next time I'll post all the error messages here for further process.


Thanks

Last edited by shaana2khan; 12-31-2015 at 12:20 AM.
 
Old 12-31-2015, 05:36 PM   #2
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 18,806

Rep: Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179
Quote:
Originally Posted by shaana2khan View Post
[root@imp ~]# kinit username@domain.local
Password for nitan.kumar@impressico.local:
kinit: KDC reply did not match expectations while getting initial credentials

2nd error:-
[root@imp ~]# /usr/bin/net join -w domain -S ad.domain.local -U ad username
Enter userpassword password:
Failed to join domain: failed to set machine kerberos encryption types: Insufficient access
ADS join did not work, falling back to RPC...
Enter User passsword password:
Failed to join domain: failed to lookup DC info for domain 'IMPRESSICO' over rpc: Logon failure

I did Google lot but there are few errors messages answer aren't available on Google.
Wrong...this entire error message is *EASILY* found on Google, along with thousands of troubleshooting guides, like this one:

https://itsecureadmin.com/wiki/index...tive_Directory

Quote:
Please send me Ur l or any type of help which can help to sort it out.
No, we're not going to send you anything; either participate in the forum here, or get help elsewhere...we aren't going to email you solutions.
Quote:
This is my first post
Really??? Then why does it say you've posted over 40 times, and have been a member here for FOUR YEARS???
Quote:
and next time I'll post all the error messages here for further process.
If you want help from anyone, you need to provide DETAILS...not 'next time'..with EVERY QUESTION you ask. Read the LQ Rules and "Question Guidelines" link in my posting signature.

Last edited by TB0ne; 01-02-2016 at 11:31 AM.
 
Old 01-02-2016, 04:18 AM   #3
shaana2khan
Member
 
Registered: Nov 2012
Posts: 46

Original Poster
Rep: Reputation: Disabled
Hello All.

I got the solution for above asked question.

I found this lines somewhere in Google.Please try this one may be it will work for you too.

2. # vi /etc/ssh/sshd_config

Kerberos options

KerberosAuthentication yes

KerberosOrLocalPasswd yes

KerberosTicketCleanup yes

KerberosGetAFSToken yes

KerberosUseKuserok yes

# GSSAPI options

GSSAPIAuthentication yes

GSSAPICleanupCredentials yes


To make these changes take place, we now need to restart the SSHD daemon.


3. # systemctl restart sshd

Thanks Guru sir for not helping me and insist me to find solution own my own.
 
Old 01-02-2016, 11:36 AM   #4
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 18,806

Rep: Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179Reputation: 4179
Quote:
Originally Posted by shaana2khan View Post
Hello All.
I got the solution for above asked question. I found this lines somewhere in Google.Please try this one may be it will work for you too.

2. # vi /etc/ssh/sshd_config

Kerberos options
KerberosAuthentication yes
KerberosOrLocalPasswd yes
KerberosTicketCleanup yes
KerberosGetAFSToken yes
KerberosUseKuserok yes
# GSSAPI options
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes

To make these changes take place, we now need to restart the SSHD daemon.

3. # systemctl restart sshd

Thanks Guru sir for not helping me and insist me to find solution own my own.
First, you LIED by saying "this is my first post". Secondly, I handed you a link with complete instructions, so saying "not helping me", is fairly insulting.

Most importantly, I can't seem to find ANYTHING in any guide, related to these flags in SSHD_CONFIG, but I DO see many how-to guides that walk through user kerberos. Saying you found them "somewhere in Google" isn't too helpful, since without the CONTEXT for those lines, and the rest of your configuration, they're meaningless.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to prepare Suse 11 server to join the active directory domain? -- URGENT!! cbc Linux - Newbie 6 11-28-2014 09:45 AM
How To join Maya to an active directory domain radulm Linux - Newbie 6 05-31-2012 06:52 AM
How to prepare Suse 11 server to join the active directory domain? cbc SUSE / openSUSE 1 06-29-2011 07:51 PM
how can we join a linux system on active directory domain yasir453 Red Hat 6 03-16-2010 07:20 AM
Join Samba to Active Directory Domain xudonw1 Debian 0 05-04-2007 08:17 AM


All times are GMT -5. The time now is 01:59 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration