# [OmniOS-discuss] Support for AD join when SMBv1 is disabled?

Omen Wild omen.wild at gmail.com
Thu Oct 11 18:55:23 UTC 2018

- Previous message: [OmniOS-discuss] Vbf: Ang: Qlogic QLE2672 (PCI ID 1077:2031) HBA Support?
- Next message: [OmniOS-discuss] Support for AD join when SMBv1 is disabled?
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Our AD forest admins just disabled SMBv1 support this morning and our AD
    joined OmniOSce boxes (freshly upgraded to r151026w) can no longer talk
    to the forest. I have tried removing and re-staging the computer object
    in AD but it still won't join.

    The command I run:

    root at metro-sequoia:~/ # smbadm join -y -u my-admin-account OUR.DOMAIN.EDU
    Enter domain password:
    Joining OUR.DOMAIN.EDU ... this may take a minute ...
    failed to join domain OUR.DOMAIN.EDU
    using AD server: oudc6c.our.domain.edu
    Failed getting initial credentials.  (Wrong password?)
    Please refer to the service log for more information.

    And yes, I've retried multiple times to make sure I did not mess up my
    password.

    Full debug log below.

    Any clues?

    Thanks,
       Omen

    Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 814963 daemon.debug] smbd: join domain: OUR.DOMAIN.EDU
    Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 727883 daemon.info] smbd_dc_monitor_refresh
    Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 288469 daemon.debug] smb_ddiscover_refresh set cfg changed
    Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 164070 daemon.debug] smbd_dc_monitor: config changed
    Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 467060 daemon.debug] smb_ddiscover_service: not a domain member
    Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 243688 daemon.debug] smb_ddiscover_service waiting
    Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 467060 daemon.debug] smb_ddiscover_service: not a domain member
    Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 243688 daemon.debug] smb_ddiscover_service waiting
    Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 510351 daemon.notice] smb_locate_dc status 0xc00000dc
    Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 199031 daemon.notice] smbd_dc_update: our.domain.edu: locate failed
    Oct 11 11:46:40 metro-sequoia.our.domain.edu idmap[433]: [ID 650504 daemon.info] LDAP: oudc4c.our.domain.edu:3268: Local error
    Oct 11 11:46:40 metro-sequoia.our.domain.edu idmap[433]: [ID 452651 daemon.error] adutils: ldap_lookup_init failed
    Oct 11 11:46:41 metro-sequoia.our.domain.edu smbd[766]: [ID 149131 daemon.info] smbd: found AD server oudc4c.our.domain.edu
    Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 931549 daemon.error] ndr_rpc_bind: smbrdr_ctx_new(Srv=oudc4c.our.domain.edu Dom=OUR.DOMAIN.EDU User=my-admin-account), NETWORK_ACCESS_DENIED (0xc0000$
    Oct 11 11:46:42 metro-sequoia.our.domain.edu last message repeated 2 times
    Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 972153 daemon.error] smbns_krb: getting initial credentials (Cannot determine realm for host)
    Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 871254 daemon.error] smbd: failed joining OUR.DOMAIN.EDU (UNSUCCESSFUL)
    Oct 11 11:46:42 metro-sequoia.our.domain.edu idmap[433]: [ID 864022 daemon.debug] No domain name specified.
    Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 727883 daemon.info] smbd_dc_monitor_refresh
    Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 288469 daemon.debug] smb_ddiscover_refresh set cfg changed
    Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 164070 daemon.debug] smbd_dc_monitor: config changed
    Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 467060 daemon.debug] smb_ddiscover_service: not a domain member
    Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 243688 daemon.debug] smb_ddiscover_service waiting
    Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 467060 daemon.debug] smb_ddiscover_service: not a domain member
    Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 243688 daemon.debug] smb_ddiscover_service waiting
    Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 510351 daemon.notice] smb_locate_dc status 0xc00000dc
    Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 199031 daemon.notice] smbd_dc_update: our.domain.edu: locate failed

    --
    Weekends were made for programming.

- Previous message: [OmniOS-discuss] Vbf: Ang: Qlogic QLE2672 (PCI ID 1077:2031) HBA Support?
- Next message: [OmniOS-discuss] Support for AD join when SMBv1 is disabled?
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the OmniOS-discuss mailing list