Hi, On 02/06/2013 11:46 AM, Andrew Bartlett wrote:
>> I'm running a Active Directory domain on Samba 4.0.1 and I'm trying to >> join a Solaris 11 machine this domain: >> >> # smbadm join -u Administrator DOMAIN >> After joining DOMAIN the smb service will be restarted automatically. >> Would you like to continue? [no]: yes >> Enter domain password: >> Locating DC in DOMAIN ... this may take a minute ... >> Joining DOMAIN ... this may take a minute ... >> failed to join DOMAIN: UNSUCCESSFUL >> Please refer to the system log for more information. >> >> In /var/adm/messages: >> Jan 30 21:33:34 host smbd[827]: [ID 232655 daemon.notice] ldap_modify: >> Insufficient access >> Jan 30 21:33:34 host smbd[827]: [ID 702911 daemon.notice] Workstation >> trust account update failed >> >> Windows 7 clients are able to join, but Solaris 11 fails. >> >> Kerberos seems to be fine: >> # kinit oskar >> Password for os...@domain.com: >> Warning: Your password will expire in 41 days on Wed Mar 13 19:44:52 2013 >> >> But if I run it for Administrator: >> # kinit Administrator >> Password for administra...@domain.com: >> Warning: Your password will expire in 41 days on Wed Mar 13 18:36:46 2013 >> kinit: no ktkt_warnd warning possible >> >> Any idea what is going wrong here? > > Does this work against a freshly provisioned Samba 4.0.3 domain? > > We fixed a lot of ACL related things with that release. Haven't tried. I'm running the AD now on a 2008R2 server. Ihsan -- ih...@dogan.ch http://blog.dogan.ch/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
