Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Can't Join Windows Domain

1 view
Skip to first unread message

Rick

unread,
Dec 9, 2009, 1:45:20 PM12/9/09
to
When I try to join our local Windows domain, I get an error saying the
DC for the domain cannot be found. Is there something that needs to be
done on the Domain Controller? It is up. There is a room full of XP
clients connecting.

The DC is running Windows 2003 Server.

Any and all help appreciate

Jan Kandziora

unread,
Dec 10, 2009, 6:09:13 AM12/10/09
to
Rick schrieb:

> Is there something that needs to be
> done on the Domain Controller?
>
You need to set up a machine account for the new computer on the DC.

Kind regards

Jan

Rick

unread,
Dec 10, 2009, 5:26:13 PM12/10/09
to
Thanks. How do I do that? It was my impression that the software
provided in opensuse took care of setting up the machine accounts on the DC.

--
Rick

Werner Flamme

unread,
Dec 14, 2009, 1:19:20 PM12/14/09
to
Rick [10.12.2009 23:26]:

Yes, it does. At least for me.

Say, your domain is EXAMPLE. When you enter "ping EXAMPLE", does your DC
answer? It should...

Your /etc/krb5.conf should look like
---snip---
[libdefaults]
default_realm = EXAMPLE
[realms]
EXAMPLE = {
kdc = dc1.example.com
kdc = dc2.example.com
}
---pins---

In /etc/samba/smb.conf, one line should be
workgroup = EXAMPLE

and some other lines are
realm = EXAMPLE
security = ads

Then, do a "kinit <your username>", check the kerberos ticket with
"klist", and join the domain with "net ads join -U <your username>".
This works for me, even on Slowlaris ;-)

HTH
Werner

Rick

unread,
Dec 15, 2009, 6:27:21 AM12/15/09
to
On Mon, 14 Dec 2009 19:19:20 +0100, Werner Flamme wrote:

> Yes, it does. At least for me.
>
> Say, your domain is EXAMPLE. When you enter "ping EXAMPLE", does your DC
> answer? It should...
>
> Your /etc/krb5.conf should look like
> ---snip---
> [libdefaults]
> default_realm = EXAMPLE
> [realms]
> EXAMPLE = {
> kdc = dc1.example.com
> kdc = dc2.example.com
> }
> ---pins---
>
> In /etc/samba/smb.conf, one line should be workgroup = EXAMPLE
>
> and some other lines are
> realm = EXAMPLE
> security = ads
>
> Then, do a "kinit <your username>", check the kerberos ticket with
> "klist", and join the domain with "net ads join -U <your username>".
> This works for me, even on Slowlaris ;-)

Thanks.

--
Rick

0 new messages