[OmniOS-discuss] Support for AD join when SMBv1 is disabled?
Omen Wild
omen.wild at gmail.com
Thu Oct 11 18:55:23 UTC 2018
Our AD forest admins just disabled SMBv1 support this morning and our AD
joined OmniOSce boxes (freshly upgraded to r151026w) can no longer talk
to the forest. I have tried removing and re-staging the computer object
in AD but it still won't join.
The command I run:
root at metro-sequoia:~/ # smbadm join -y -u my-admin-account OUR.DOMAIN.EDU
Enter domain password:
Joining OUR.DOMAIN.EDU ... this may take a minute ...
failed to join domain OUR.DOMAIN.EDU
using AD server: oudc6c.our.domain.edu
Failed getting initial credentials. (Wrong password?)
Please refer to the service log for more information.
And yes, I've retried multiple times to make sure I did not mess up my
password.
Full debug log below.
Any clues?
Thanks,
Omen
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 814963 daemon.debug] smbd: join domain: OUR.DOMAIN.EDU
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 727883 daemon.info] smbd_dc_monitor_refresh
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 288469 daemon.debug] smb_ddiscover_refresh set cfg changed
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 164070 daemon.debug] smbd_dc_monitor: config changed
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 467060 daemon.debug] smb_ddiscover_service: not a domain member
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 243688 daemon.debug] smb_ddiscover_service waiting
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 467060 daemon.debug] smb_ddiscover_service: not a domain member
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 243688 daemon.debug] smb_ddiscover_service waiting
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 510351 daemon.notice] smb_locate_dc status 0xc00000dc
Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 199031 daemon.notice] smbd_dc_update: our.domain.edu: locate failed
Oct 11 11:46:40 metro-sequoia.our.domain.edu idmap[433]: [ID 650504 daemon.info] LDAP: oudc4c.our.domain.edu:3268: Local error
Oct 11 11:46:40 metro-sequoia.our.domain.edu idmap[433]: [ID 452651 daemon.error] adutils: ldap_lookup_init failed
Oct 11 11:46:41 metro-sequoia.our.domain.edu smbd[766]: [ID 149131 daemon.info] smbd: found AD server oudc4c.our.domain.edu
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 931549 daemon.error] ndr_rpc_bind: smbrdr_ctx_new(Srv=oudc4c.our.domain.edu Dom=OUR.DOMAIN.EDU User=my-admin-account), NETWORK_ACCESS_DENIED (0xc0000$
Oct 11 11:46:42 metro-sequoia.our.domain.edu last message repeated 2 times
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 972153 daemon.error] smbns_krb: getting initial credentials (Cannot determine realm for host)
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 871254 daemon.error] smbd: failed joining OUR.DOMAIN.EDU (UNSUCCESSFUL)
Oct 11 11:46:42 metro-sequoia.our.domain.edu idmap[433]: [ID 864022 daemon.debug] No domain name specified.
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 727883 daemon.info] smbd_dc_monitor_refresh
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 288469 daemon.debug] smb_ddiscover_refresh set cfg changed
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 164070 daemon.debug] smbd_dc_monitor: config changed
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 467060 daemon.debug] smb_ddiscover_service: not a domain member
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 243688 daemon.debug] smb_ddiscover_service waiting
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 467060 daemon.debug] smb_ddiscover_service: not a domain member
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 243688 daemon.debug] smb_ddiscover_service waiting
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 510351 daemon.notice] smb_locate_dc status 0xc00000dc
Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 199031 daemon.notice] smbd_dc_update: our.domain.edu: locate failed
--
Weekends were made for programming.
More information about the OmniOS-discuss
mailing list