Have you pulled a current kerberos ticket with the domain admin account successfully?
kinit administrator
klist
The second would should a current key good for 24 hrs for the administrator account.
This makes sure the kerberos config is correct and functioning.

When I did it noticed that the dns role wasn't applied correctly either and I already run bind so I have the active directory specifics in my zone of my primary dns. The oddity is that samba4 requires a local form of dns and won't use an external source which I guess because they try and mimic a standalone single windows dc and the member server and additional dc seem an afterthought due to their ongoing difficulties with setup and functions.
Steve
On 2/20/2014 4:38 PM, John Kenyon wrote:
-----Original Message-----
From: users-requ...@sogo.nu [mailto:users-requ...@sogo.nu] On Behalf
Of Steve Boley
Sent: Friday, 21 February 2014 1:44 AM
To: users@sogo.nu
Subject: Re: [SOGo] Samba4 issue with existing AD and Exchange 2007

Failed to apply records: Failed to find GUID for (null): Invalid DN syntax

This is the error that shows your passing the wrong domain to be joining.

Is your windows forest overall just mycompany.com.au then that is what you
should join the samba to not any subdomains.  If this is your problem edit the
kerberos file and alter your command to remove the subdomains and it
should then successfully join.
Steve

Hi Steve,

The domain is actually: int.mycompany.com.au

I've found the following bug report which looks like this issue (see comment 22 
onwards) - https://bugzilla.samba.org/show_bug.cgi?id=8680

I've tested the SerNet samba version 4.1.4 but still have the same issue.

I'll chase this up with the Samba guys, unless someone here has come across a 
solution for this issue?

Cheers, John

--
users@sogo.nu
https://inverse.ca/sogo/lists

Reply via email to