LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 04-07-2010, 01:00 AM   #1
tikit
Member
 
Registered: Feb 2008
Posts: 84

Rep: Reputation: 16
Error joining SLES 10 SP2 to Windows 2008 Domain


Hi,

I would like to join SLES server to Microsoft Server 2008 Active Directory to enable domain authentication when accessing samba shares. When I run
Code:
net ads join -U administrator
I get the following error
Code:
"Failed to join domain: Improperly formed account name."
I tried the same samba configuration on another server (OpenSuse 11.2) without any problem, so I think it is somehow connected with the Samba version, but I'm not sure. Has anybody experienced this behaviour?

Obtaining Kerberos ticket-granting ticket
Code:
kinit administrator@MYDOMAIN
completed without problem

the package versions on SLES 10 SP2 (x86_64) are following
Code:
samba-3.0.28-0.5
samba-client-3.0.28-0.5
krb5-1.4.3-19.34
krb5-32bit-1.4.3-19.34
krb5-client-1.4.3-19.34
here is the configuration

/etc/samba/smb.conf
Code:
[global]
	workgroup = OUR-DOMAIN
        security = ads
        realm = OUR-DOMAIN
        encrypt passwords = true
        idmap uid = 16777216-33554431
        idmap gid = 16777216-33554431
        password server = dc.our-domain 

[public]
        comment = Public Temporary Data
	path = /mnt/public
        read only = No
/etc/krb5.conf
Code:
[libdefaults]
	default_realm = OUR-DOMAIN

[realms]
	OUR-DOMAIN = {
                kdc = dc.our-domain 
		admin_server = dc.our-domain 
	}

[domain_realm]
.OUR-Domain = OUR-DOMAIN
OUR-Domain = OUR-DOMAIN

[logging]
    kdc = FILE:/var/log/krb5/krb5kdc.log
    admin_server = FILE:/var/log/krb5/kadmind.log
    default = SYSLOG:NOTICE:DAEMON
Thanks in advance for for any ideas how to solve that. It would be great if there was a solution without reinstalling the system
 
Old 04-07-2010, 06:35 PM   #2
Sharaz
Member
 
Registered: Jun 2005
Location: Dallas, TX
Distribution: Fedora 11,12, RedHat4,6, CentOS4,5, FreeBSD7,8
Posts: 70

Rep: Reputation: 16
whats the version of the one that working?

i dont join my stations to the domain, but am still able to take advantage of AD logon thru params set in the smb.conf file, you might consider that. but likely, it is the version thats causing the problem. i cant remember the version off the top of mny head, but the version in CentOS/RHEL5 will not work with windows 7, and the version of samba in Fedora 12 will.

3.4.x i think is in FC12?
 
Old 04-08-2010, 02:53 PM   #3
tikit
Member
 
Registered: Feb 2008
Posts: 84

Original Poster
Rep: Reputation: 16
thanks for the reply. the version on this is working is samba 3.4.2-1.1.3.1 (opensuse 11.2). Could you please give me some advice how to enable shares without joining the AD?

Thanks very much
 
Old 04-20-2010, 08:23 AM   #4
tikit
Member
 
Registered: Feb 2008
Posts: 84

Original Poster
Rep: Reputation: 16
I tried reinstall to SLES 11.2. I can now add the server to domain by
Code:
net ads join -U administrator
but when accessing share I get
Code:
check_ntlm_password:  Authentication for user [johny] -> [johny] FAILED with error NT_STATUS_PIPE_DISCONNECTED
. When winbind service is stopped I get
Code:
 Authentication for user [johny] -> [johny] FAILED with error NT_STATUS_INVALID_PARAMETER
Does anybody know what I am doing wrong? Thanks for any hint.
 
Old 05-26-2010, 12:02 PM   #5
aixuser10
LQ Newbie
 
Registered: May 2010
Location: Houston
Posts: 1

Rep: Reputation: 0
Did you get this resolved?

I'm having this same problem and do not see a resolution. Were you able to get this resolved?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
error joining windows 2003 domain ncsuapex Linux - Software 0 09-22-2008 03:52 PM
Joining a linux machine to a windows domain having a wndows 2003 as domain contoller sukalyan_g Suse/Novell 1 03-28-2008 01:31 AM
Error joining Windows domain plustiber Linux - Networking 1 11-13-2007 04:47 PM
Initialized SLES 8 update over OES SLES 9 SP2 by mistake. Kamenko Suse/Novell 4 03-13-2007 05:21 AM
Joining XP Pro SP2 to Samba domain PDC Les62 Linux - Networking 13 10-09-2005 08:00 AM


All times are GMT -5. The time now is 08:57 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration