I looked into the source code, and have some observations:
1.
I don't wrote the realm in my smb.conf, because I get the realm form net ads 
info.
Once I set realm in the smb.conf, net ads info worked.
Does it mean the realm is needed in smb.conf?
In libads\Ldap.c, the ads_try connect() do not have the realm value 
(ads->server.realm). Is there anything wrong in my environment?
Or the realm must be in smb.conf?

2. When I try to join domain, using net ads join -Uadministrator%password, I 
got the following message:

Using short domain name -- NAS
Failed to set servicePrincipalNames. Please ensure that
the DNS domain of this server matches the AD domain,
Or rejoin with using Domain Admin credentials.
Disabled account for 'NSAF933' in realm 'NAS.LOCAL'

I found the problem is in util\net_ads.c. The function net_set_machine_spn() do 
Line:1001 status = ads_gen_mod(ads_s, new_dn, mods). It returns 20 and let the 
ADS_ERROR_OK() check fail. Mark the line join domain will be successfully.

Please give me some advise.

Thanks,
Latrell


-----Original Message-----
From: Latrell Wang 王獻綱 
Sent: Wednesday, January 24, 2007 9:26 AM
To: 'Gerald (Jerry) Carter'
Cc: samba@lists.samba.org
Subject: RE: [Samba] net ads info can't find the ldap server.

Hi Jerry:
I've sent you yesterday, but it seems something wrong. I send it again.

Thanks,
Latrell.

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gerald (Jerry) 
Carter
Sent: Monday, January 22, 2007 10:08 PM
To: Latrell Wang 王獻綱
Cc: samba@lists.samba.org
Subject: Re: [Samba] net ads info can't find the ldap server.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Latrell Wang 王獻綱 wrote:

>   Failed to parse cldap reply


Can you send me a raw sniff from Wireshark?  And a level 10
debug log from 'net ads info'?





cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFtMUtIR7qMdg1EfYRAuqlAKCrMRHnPTF0lkJWzFqV7ASApjMyNgCeP4A+
dsmGJx76nEC30nf7qX64tko=
=BHrj
-----END PGP SIGNATURE-----
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to