Subject: samba: Failed to connect to AD: No logon servers
Package: samba
Version: 2:3.2.5-4lenny13
Severity: normal
Hi Everybody!
I'm configuring an IPv6-Only network, i'm using Debian Lenny 506, Samba 3.2 and
Windows Server 2008 for PDC. The problem is that i cant join to the domain.
After configuring the entire system, when i try to join to the domain("net ads
join -U Administrator -S FQDN_AD_Server"), returns "Failed to join domain:
Failed to connect to AD: No logon servers", But, the Linux host is added to
"Active directory Users and Groups".
When i try:
"kinit Administrator"
It's ok.
With the same configuration but on IPv4 all works fine.
I guess it's not a configuration problem because when install Debian Backport
for Samba, Samba 2.5 that ships with Debian Squeeze it works fine with the same
configuration...
krb5.conf:
[libdefaults]
default_realm = DOMAIN.LOCAL
v4_instance_resolve = false
v4_name_convert = {
host = {
rcmd = host
ftp = ftp
}
plain = {
something = something-else
}
}
fcc-mit-ticketflags = true
[realms]
DOMAIN.LOCAL = {
kdc = kdc.domain.local
admin_server = kdc.domain.local
default_domain = domain.local
}
[domain_realm]
.domain.local = DOMAIN.LOCAL
domain.local = DOMAIN.LOCAL
[login]
krb4_convert = true
krb4_get_tickets = false
smb.conf:
[global]
workgroup = DOMAIN
realm = DOMAIN.LOCAL
password server = kdc.domain.local
winbind use default domain = yes
disable netbios = yes
log level = 3
preferred master = no
local master = no
domain master = no
security = ads
server string = %h server
dns proxy = no
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
panic action = /usr/share/samba/panic-action %d
encrypt passwords = true
passdb backend = tdbsam
obey pam restrictions = yes
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:*
%n\n *password\supdated\ssuccessfully* .
pam password change = yes
domain logons = no
idmap uid = 10000-20000
idmap gid = 10000-20000
template shell = /bin/bash
winbind enum groups = yes
winbind enum users = yes
hosts:
127.0.1.1 localhost.prova.local localhost
127.0.1.1 debhost.domain.local debhost
::1 localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts
resolv.conf:
domain domain.local
search domain.local
nameserver fc00:1:2:3::1
A dump from "net ads testjoin":
[2010/10/24 13:27:37, 3] param/loadparm.c:lp_load_ex(8783)
lp_load_ex: refreshing parameters
[2010/10/24 13:27:37, 3] param/loadparm.c:init_globals(4621)
Initialising global parameters
[2010/10/24 13:27:37, 3] param/params.c:pm_process(569)
params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
[2010/10/24 13:27:37, 3] param/loadparm.c:do_section(7446)
Processing section "[global]"
[2010/10/24 13:27:37, 2] lib/interface.c:add_interface(337)
added interface eth0 ip=2002:d981:540f:0:a00:27ff:fea0:593d
bcast=2002:d981:540f:0:ffff:ffff:ffff:ffff netmask=ffff:ffff:ffff:ffff::
[2010/10/24 13:27:37, 2] lib/interface.c:add_interface(337)
added interface eth0 ip=fc00:1:2:3::4 bcast=fc00:1:2:3:ffff:ffff:ffff:ffff
netmask=ffff:ffff:ffff:ffff::
[2010/10/24 13:27:37, 2] lib/interface.c:add_interface(337)
added interface eth0 ip=fe80::a00:27ff:fea0:593d%eth0
bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff::
[2010/10/24 13:27:37, 3] libsmb/namequery.c:get_dc_list(1909)
get_dc_list: preferred server list: ", w2k8"
[2010/10/24 13:27:37, 3] lib/util_sock.c:interpret_addr(174)
interpret_addr: host address is invalid for host fc00:1:2:3::1
[2010/10/24 13:27:37, 1] libads/cldap.c:recv_cldap_netlogon(156)
no reply received to cldap netlogon
[2010/10/24 13:27:37, 3] libads/ldap.c:ads_try_connect(207)
ads_try_connect: CLDAP request fc00:1:2:3::1 failed.
[2010/10/24 13:27:37, 0] utils/net_ads.c:ads_startup_int(286)
ads_connect: No logon servers
Join to domain is not valid: No logon servers
[2010/10/24 13:27:37, 2] utils/net.c:main(1172)
return code = -1
-- System Information:
Debian Release: 5.0.6
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.26-2-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages samba depends on:
ii adduser 3.110 add and remove users and groups
ii debconf [debcon 1.5.24 Debian configuration management sy
ii libacl1 2.2.47-2 Access control list shared library
ii libattr1 1:2.4.43-2 Extended attribute shared library
ii libc6 2.7-18lenny4 GNU C Library: Shared libraries
ii libcomerr2 1.41.3-1 common error description library
ii libcups2 1.3.8-1+lenny8 Common UNIX Printing System(tm) -
ii libgnutls26 2.4.2-6+lenny2 the GNU TLS library - runtime libr
ii libkrb53 1.6.dfsg.4~beta1-5lenny4 MIT Kerberos runtime libraries
ii libldap-2.4-2 2.4.11-1+lenny2 OpenLDAP libraries
ii libpam-modules 1.0.1-5+lenny1 Pluggable Authentication Modules f
ii libpam-runtime 1.0.1-5+lenny1 Runtime support for the PAM librar
ii libpam0g 1.0.1-5+lenny1 Pluggable Authentication Modules l
ii libpopt0 1.14-4 lib for parsing cmdline parameters
ii libtalloc1 1.2.0~git20080616-1 hierarchical pool based memory all
ii libwbclient0 2:3.2.5-4lenny13 client library for interfacing wit
ii logrotate 3.7.1-5 Log rotation utility
ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip
ii procps 1:3.2.7-11 /proc file system utilities
ii samba-common 2:3.2.5-4lenny13 Samba common files used by both th
ii update-inetd 4.31 inetd configuration file updater
ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime
samba recommends no packages.
Versions of packages samba suggests:
pn ldb-tools <none> (no description available)
ii openbsd-inetd [inet-superse 0.20080125-2 The OpenBSD Internet Superserver
pn smbldap-tools <none> (no description available)
-- debconf information:
samba/run_mode: daemons
samba/generate_smbpasswd: true
Regards.
