Samba with YAST2 client problem

I keep getting an error when I try and join my suse box to our domain. The error is just an error message that says "error" with an OK button nothing more. This is in the YAST Samba client config.

Is there any other way to find more information on this error. Any help would be cool.

Try to run the command from command line and you'll hopefully get a more descriptive error message:

net join <DOMAIN>

Did you create a computer account for the linux box on your Windows server?

When I tried the command from the root account it tried to do the join using root as the login and asked for the password.

I created an account on the box called administrator and su'ed into it and ran the command then and typed in our admin password when requested... here is what i got...

net join CAS
administrator's password:***************
[2005/11/17 20:57:39, 0] passdb/secrets.c:secrets_init(64)
Failed to open /etc/samba/secrets.tdb
ADS join did not work, falling back to RPC...
[2005/11/17 20:57:40, 0] passdb/secrets.c:secrets_init(64)
Failed to open /etc/samba/secrets.tdb
[2005/11/17 20:57:40, 0] utils/net_rpc.c:rpc_oldjoin_internals(268)
error storing domain sid for CAS
[2005/11/17 20:57:42, 0] passdb/secrets.c:secrets_init(64)
Failed to open /etc/samba/secrets.tdb
[2005/11/17 20:57:42, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(335)
error storing domain sid for CAS
Unable to join domain CAS.


Any ideas?

Did You resolve it?
I have exactly the same problem. New computer is created in Windows domain, but something is wrong with trust, i think...

I think i got it...

Yevgeniy Kelman

I have still not sorted this... have played with it a bit. The PC account on the DC is fine and just like any other. Does anyone know whats wrong?

Thanks for any help...

WHat are you trying to do? Have you setup Kerberos?

hmmm... no i have just tried to do a join after creating the PC account on the DC. I get the feeling that I am being a noob now that u mention Kerberos. Do you know of a really good howto that would explain the join to the domain and setup of Kerberos?

What do you want to be able to do is the real question.

Do you want to logon and be authenticated to the domain? Joining a computer object to the domain doesn't mean you will always authenticate as that person.

An EASY way to do it with the Control Center is to change the setting:

Go to: Internet & Network click, Local Network Browsing, and put in the username you want to use DOMAIN\username < in that format for domain user

We use the SuSE box as a firewall, SMB and LAMP server. It runs Eventum for us to manage all our calls as well as Linpha for our Academies photo archive. We need to be able to share a directory on the box that everyone will be able to put photos into. I need the box to allow accounts from our AD domain to have access to the share. I also need to be able to allow other resources like printers and so on to be shared by people on the AD domain. We are runing Win2k Server on the DC and other servers.

Thanks for any help...

I think that Your problem is security. Secrets.tdb might not have enough permission. You can login as a root account and try to join domain (uYou need to use "net join ... command with -U ).
(or You can change permissions on secrets.tdb).

Please let me know if this helps.

Yevgeniy Kelman

What I discribe in post 3 >> http://www.linuxquestions.org/questi...33#post1956633 was done as root. Just for good measure though i have done it again and here is what I got...

CASLIN01:~ # net join CAS.SCH.UK -U administrator
administrator's password:
[2005/11/30 07:39:20, 0] libads/kerberos.c:ads_kinit_password(146)
kerberos_kinit_password administrator@CAS.SCH.UK failed: Cannot resolve network address for KDC in requested realm
[2005/11/30 07:39:20, 0] utils/net_ads.c:ads_startup(191)
ads_connect: Cannot resolve network address for KDC in requested realm
Joined domain CAS.

hhhmmmm thats different...

Thanks for any help...

i guess congratulations. You were able to join CAS domain.

Yevgeniy Kelman

Originally posted by AnRkey What I describe in post 3 >> http://www.linuxquestions.org/questi...33#post1956633 was done as root. Just for good measure though i have done it again and here is what I got... CASLIN01:~ # net join CAS.SCH.UK -U administrator administrator's password: [2005/11/30 07:39:20, 0] libads/kerberos.c:ads_kinit_password(146) kerberos_kinit_password administrator@CAS.SCH.UK failed: Cannot resolve network address for KDC in requested realm [2005/11/30 07:39:20, 0] utils/net_ads.c:ads_startup(191) ads_connect: Cannot resolve network address for KDC in requested realm Joined domain CAS. hhhmmmm thats different... Thanks for any help...

I am concerned about the error though. I was looking through the permissions for the share that I am trying to create and I can't see any accounts from the AD. How would I see these accounts and groups to give them permissions over this folder? I am using webmin to set things like the shares up. All I can see is an option to sync my SMB accounts with the unix accounts.

Any help is always appreciated.

Thanks again...

Is it Linux or Windows share?