Join Linux client to Linux server.

[Jason Long]

Hello.
I launch a CentOS Linux server (DHCP, DNS and domain controller) via Samba-sernet. My linux server is :

workgroup = LINUX
realm = LINUX.DJ
netbios name = FILESERVER

I can join Windows clients to my Linux domain very easy but I can't add Linux clients. I change "smb.conf" as below on my Linux client :

# cat /etc/samba/smb.conf
[global]
workgroup = LINUX
security = ADS
realm = LINUX.DJ
password server = 192.168.72.1
dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab
server string = Samba 4 Client %h
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind expand groups = 4
winbind nss info = rfc2307
winbind refresh tickets = Yes
winbind normalize names = Yes
idmap config * : backend = tdb
idmap config * : range = 2000-9999
idmap config LINUX : backend = ad
idmap config LINUX : range = 10000-999999
idmap config LINUX : schema_mode = rfc2307
printcap name = cups
cups options = raw
usershare allow guests = yes
domain master = no
local master = no
preferred master = no
os level = 20
map to guest = bad user
vfs objects = acl_xattr
map acl inherit = Yes
store dos attributes = Yes
log level = 6
wins server = fileserver.linux.dj

[homes]
comment = Home Directories
browseable = no
writable = yes




and krb5.conf is as below :

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
dns_lookup_realm = false
dns_lookup_kdc = true
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true
rdns = false
default_realm = LINUX.DJ
default_ccache_name = KEYRINGersistent:%{uid}

[realms]
LINUX.DJ = {
kdc = 192.168.72.1 # The IP Address of Linux DNS Server.
}

[domain_realm]
.linux.DJ = .LINUX.DJ
Linux.DJ = .LINUX.DJ


and then run below command for join :

[root@test2 ~]# net ads join -U administrator
Enter administrator's password:
Using short domain name -- LINUX
Joined 'TEST2' to realm 'linux.dj'
DNS Update for test2.linux.dj failed: ERROR_DNS_INVALID_MESSAGE
DNS update failed!


But I can't login to my linux client via AD user name.

 

[Paul Lopez]

Stop winbind, delete winbindd_cache.tdb & winbindd_idmap.tdb from /var/cache/samba, then restart winbind. Maybe this might work.
Also, check whether there isn't anything corrupted in tdbs.

 

[Jim Laughlan]

http://www.cyberciti.biz/faq/centos-fedora-rhel-iptables-open-nfs-server-ports/

 

[Jason Long]

Stop winbind, delete winbindd_cache.tdb & winbindd_idmap.tdb from /var/cache/samba, then restart winbind. Maybe this might work.
Also, check whether there isn't anything corrupted in tdbs.

I have not any "winbind" service and "samba" directory in "/var/cache" !!!!
My Linux client is Oracle Linux.