-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 09/08/2006 05:26 AM, Helge Bahmann escreveu: > Created an "add machine" script that basically looks for an unused > uid/rid, and then creates a stub LDAP entry for the machine; the first > time I issue "net join", the script is invoked and creates the LDAP entry > correctly, but the join operation fails nevertheless: > > f1sa:~# net -U winadmin join > winadmin's password: > [2006/09/08 10:19:40, 0] utils/net_ads.c:ads_startup(191) > ads_connect: No results returned > Creation of workstation account failed > Unable to join domain FAK1. > > The following log file entries are generated for this operation: > > SASL/GSSAPI authentication started > SASL username: samba/[EMAIL PROTECTED] > SASL SSF: 56 > SASL installing layers > [2006/09/08 09:53:15, 0] passdb/pdb_ldap.c:ldapsam_add_sam_account(1781) > ldapsam_add_sam_account: User 'f1sa$' already in the base, with samba > attribut > es > [2006/09/08 09:53:15, 0] rpc_server/srv_samr_nt.c:_samr_create_user(2350) > could not add user/computer f1sa$ to passdb. Check permissions? > > (the SASL/GSSAPI part is the output from my add machine script; basically > I see here that it is working correctly)
Ok, AIUI, you are adding "machine information" to an account that already exists? > However when I call "net join" a second time: > > f1sa:~# net -U winadmin join > winadmin's password: > [2006/09/08 10:22:16, 0] utils/net_ads.c:ads_startup(191) > ads_connect: No results returned > Joined domain FAK1. > > It succeeds, the LDAP entry is updated accordingly and nothing is logged > > Can someone tell me what is wrong here, or where I should have done > something differently? If the answer to the question I made above is "yes", then the second try to join the domain will find the correct fields and will be able to join the machine, I'm not sure why the first try didn't suceed but I have a strong feeling that it is related with the fact of messing with already existing accounts. > (Samba version is 3.0.14a from debian sarge) > Best regards Kind regards, - -- Felipe Augusto van de Wiel <[EMAIL PROTECTED]> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFBqFcCj65ZxU4gPQRAgLAAKDHH+rAWRqPkx8AMBvE0J4yodPrdgCfcmvi xpJrCJKFECs25Yn7Yexy8DI= =b7Pg -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba