Can't join domain

dtjohnst · 03-26-2007, 08:54 PM

Ok, I can't seem to join a domain. To be more specific, I joined a domain once before I had set up winbind, then set up winbind, and now I can't join anymore.

I don't think you'll need to see all of my configuration files, so I will only post the spefic ones that are requested. The reason I don't think you'll need all of them because some stuff works. For example:

Code:

[root@pyxis ~]#kinit ADMINISTRATOR
Administrator@MYDOMAIN.LOCAL's password:
[root@pyxis ~]#/usr/bin/ntpdate pdc.mydomain.local
25 Mar 19:36:43 ntpdate[5905]: adjust time server 10.10.100.5 offset 0.052157 sec
[root@pyxis ~]# net ads info
LDAP server: 10.10.100.5
LDAP server name: pdc.mydomain.local
Realm: MYDOMAIN.LOCAL
Bind Path: dc=MYDOMAIN,dc=LOCAL
LDAP port: 389
Server time: Sun, 25 Mar 2007 19:39:54 MDT
KDC server: 10.10.100.5
Server time offset: 0
[root@pyxis ~]# net ads lookup
Information for Domain Controller: 10.10.100.5

Response Type: SAMLOGON
GUID: 69994160-bcd8-4d88-ba02-dd01e3c71640
Flags:
        Is a PDC:                                   yes
        Is a GC of the forest:                      yes
        Is an LDAP server:                          yes
        Supports DS:                                yes
        Is running a KDC:                           yes
        Is running time services:                   yes
        Is the closest DC:                          yes
        Is writable:                                yes
        Has a hardware clock:                       yes
        Is a non-domain NC serviced by LDAP server: no
Forest:                 mydomain.local
Domain:                 mydomain.local
Domain Controller:      pdc.mydomain.local
Pre-Win2k Domain:       MYDOMAIN
Pre-Win2k Hostname:     PDC
Site Name:              Default-First-Site
Site Name (2):          Default-First-Site
NT Version: 5
LMNT Token: ffff
LM20 Token: ffff
[root@pyxis ~]#

Other things don't.

Code:

[root@pyxis ~]#wbinfo -u
Error looking up domain users
[root@pyxis ~]#wbinfo -g
Error looking up domain groups
[root@pyxis ~]# net ads status -U Administrator
Administrator's password: 
[2007/03/25 19:44:51, 0] utils/net_ads.c:ads_startup(289)
  ads_connect: Invalid credentials
[root@pyxis ~]# net ads join -U Administrator
Administrator's password: 
[2007/03/25 19:45:12, 0] utils/net_ads.c:ads_startup(289)
  ads_connect: Invalid credentials
[root@pyxis ~]#

I'm not sure which of my configuration files will be of any use. This is my first foray into linux networking. I've done a lot of other stuff, but this is brand new, and so I guess you could say I don't really know what I'm doing.

dgar · 03-27-2007, 10:15 AM

Quote:

Ok, I can't seem to join a domain. To be more specific, I joined a domain once before I had set up winbind, then set up winbind, and now I can't join anymore.

Try renaming the computer and joining, or removing the computer account in the target domain and waiting an hour.

This may be a problem with the domain controller and not SAMBA. Windows clients often have the same problem.

archtoad6 · 03-27-2007, 10:58 AM

The part about waiting an hour is especially good the M$ servers can easily take 45 min. to propagate changes. This is not Samba's fault.