error in active directoru login

bachawiss · 03-10-2013, 06:13 AM

Hi
I wish add my ubuntu host to an active directory host
the two machines pings each other,dns is working

Quote:

root@ubuntu:/home/wissem# domainjoin-cli join STONESOFT.TN Administrateur
Joining to AD Domain: STONESOFT.TN
With Computer DNS Name: ubuntu.STONESOFT.TN

Administrateur@STONESOFT.TN's password:

Error: DNS_ERROR_BAD_PACKET [code 0x0000251e]

A bad packet was received from a DNS server. Potentially the requested address
does not exist.
root@ubuntu:/home/wissem# nslookup stonesoft.tn
Server: 192.168.158.175
Address: 192.168.158.175#53

Name: stonesoft.tn
Address: 192.168.158.175

But when I use likewise to log on,it says
DNS_ERROR_BAD_PACKET
A bad packet was received from a DNS server. Potentially the requested address does not exist.

acid_kewpie · 03-10-2013, 02:26 PM

well what IS in the bad packet? run a tcpdump and look at the DNS traffic.

bachawiss · 03-10-2013, 03:42 PM

Quote:

Originally Posted by acid_kewpie

well what IS in the bad packet? run a tcpdump and look at the DNS traffic.

there's a capture file,that mention the dns query and response
https://www.dropbox.com/s/r8ayhgvtba8dc9j/dns.rar
I can't upload an archive file

acid_kewpie · 03-10-2013, 03:46 PM

ok, so what does it say?

bachawiss · 03-10-2013, 03:53 PM

Quote:

Originally Posted by acid_kewpie

ok, so what does it say?

if you can download it here
https://www.dropbox.com/s/r8ayhgvtba8dc9j/dns.rar
I have no idea about the dns querys
thanks

acid_kewpie · 03-10-2013, 03:56 PM

I don't want to download random files, thanks. Just load it into wireshark and have a look, DNS is pretty simple to understand.

bachawiss · 03-10-2013, 04:09 PM

Quote:

Originally Posted by acid_kewpie

I don't want to download random files, thanks. Just load it into wireshark and have a look, DNS is pretty simple to understand.

how can i send it to you ??

acid_kewpie · 03-10-2013, 04:12 PM

you can't thanks. I don't want it. just look at it.

bachawiss · 03-10-2013, 04:29 PM

Quote:

Originally Posted by acid_kewpie

you can't thanks. I don't want it. just look at it.

thanks
who can help me !!

acid_kewpie · 03-10-2013, 04:58 PM

you can. Open the capture file and look at it!

bachawiss · 03-10-2013, 04:59 PM

Quote:

Originally Posted by acid_kewpie

you can. Open the capture file and look at it!

i did it,and i have not understand it,I say that i have no idea about dns query

acid_kewpie · 03-10-2013, 05:02 PM

paste a full text output of the DNS packets then. really looks like the DNS request just failed, which should be pretty obvious to spot in wireshark.

bachawiss · 03-10-2013, 05:08 PM

Quote:

Originally Posted by acid_kewpie

paste a full text output of the DNS packets then. really looks like the DNS request just failed, which should be pretty obvious to spot in wireshark.

query and response

acid_kewpie · 03-10-2013, 05:13 PM

so it says "standard query response - no such name" right there. The DNS server can't resolve that requested name, just as the original error said.

That hostname is a standard entry that AD Domain Controllers use to define where to go for LDAP connectivity in a given domain. so either you're pointing at the wrong server or AD isn't set up correctly I think. I understand these names are all created automatically in a correct AD deployment.

The standard names are defined here - http://technet.microsoft.com/en-us/l.../cc961719.aspx

bachawiss · 03-10-2013, 05:19 PM

Quote:

Originally Posted by acid_kewpie

so it says "standard query response - no such name" right there. The DNS server can't resolve that requested name, just as the original error said.

That hostname is a standard entry that AD Domain Controllers use to define where to go for LDAP connectivity in a given domain. so either you're pointing at the wrong server or AD isn't set up correctly I think. I understand these names are all created automatically in a correct AD deployment.

The standard names are defined here - http://technet.microsoft.com/en-us/l.../cc961719.aspx

address resolution works well ,192.168.158.175 is the AD controller address

Quote:

root@ubuntu:/home/wissem# nslookup stonesoft.tn
Server: 192.168.158.175
Address: 192.168.158.175#53

Name: stonesoft.tn
Address: 192.168.158.175

Other windows machines are logged normally to AD
in DNS query,it searchs :_ldap._tcp.dc._msdcs.stonesoft.tn: type SRV, class IN
Have you an idea about it,what means ?