Join UCS DC to Windows Server 2012 R2 DC Failure

drohm · November 8, 2017, 7:18am

I’m trying to join my UCS domain controller to my existing Windows Server 2012 R2 domain and I’m getting an error on the 26univention-samba.inst script. Below is the output.

Domain: hc.mysite.com
NETBIOS name: HC-MYSITE

I guess I should state the obvious, but this is a subdomain and it looks like the script is taking the first segment of the domain name instead of the full name (hc.mysite.com).

Join log
59fedaef OVER: Loading Translog Overlay
59fedaef Loading shadowbind Overlay.OVER: db_init
59fedaef OVER: Configuring Translog Overlay
59fedaef OVER: Configured Translog Overlay to use file "/var/lib/univention-ldap/listener/listener"
59fedaef shadowbind_db_init
59fedaef shadowbind_db_config
59fedaef shadowbind_db_open
59fedaef OVER: db_close
59fedaef shadowbind_db_destroy
59fedaef OVER: db_destroy

univention-run-join-scripts started
Sun Nov 5 04:50:06 EST 2017

RUNNING 01univention-ldap-server-init.inst
EXITCODE=already_executed
RUNNING 02univention-directory-notifier.inst
EXITCODE=already_executed
RUNNING 03univention-directory-listener.inst
EXITCODE=already_executed
RUNNING 04univention-ldap-client.inst
EXITCODE=already_executed
RUNNING 05univention-bind.inst
EXITCODE=already_executed
RUNNING 08univention-apache.inst
EXITCODE=already_executed
RUNNING 10univention-ldap-server.inst
EXITCODE=already_executed
RUNNING 11univention-heimdal-init.inst
EXITCODE=already_executed
RUNNING 11univention-pam.inst
EXITCODE=already_executed
RUNNING 15univention-directory-notifier-post.inst
EXITCODE=already_executed
RUNNING 15univention-heimdal-kdc.inst
EXITCODE=already_executed
RUNNING 18python-univention-directory-manager.inst
EXITCODE=already_executed
RUNNING 20univention-directory-policy.inst
EXITCODE=already_executed
RUNNING 20univention-join.inst
EXITCODE=already_executed
RUNNING 25univention-dhcp.inst
EXITCODE=already_executed
RUNNING 26univention-nagios-common.inst
EXITCODE=already_executed
RUNNING 30univention-appcenter.inst
EXITCODE=already_executed
RUNNING 30univention-nagios-client.inst
EXITCODE=already_executed
RUNNING 31univention-nagios-s4-connector.inst
EXITCODE=already_executed
RUNNING 31univention-nagios-samba.inst
EXITCODE=already_executed
RUNNING 33univention-portal.inst
EXITCODE=already_executed
RUNNING 34univention-management-console-server.inst
EXITCODE=already_executed
RUNNING 34univention-self-service.inst
EXITCODE=already_executed
RUNNING 35univention-appcenter-docker.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-adtakeover.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-appcenter.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-diagnostic.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-ipchange.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-join.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-lib.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-mrtg.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-quota.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-reboot.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-services.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-setup.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-sysinfo.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-top.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-ucr.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-udm.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-updater.inst
EXITCODE=already_executed
RUNNING 35univention-self-service-passwordreset-umc.inst
EXITCODE=already_executed
RUNNING 35univention-server-overview.inst
EXITCODE=already_executed
RUNNING 36univention-management-console-module-apps.inst
EXITCODE=already_executed
RUNNING 40univention-postgresql.inst
EXITCODE=already_executed
RUNNING 40univention-virtual-machine-manager-schema.inst
EXITCODE=already_executed
RUNNING 78univention-kde.inst
EXITCODE=already_executed
RUNNING 80univention-radius.inst
EXITCODE=already_executed
RUNNING 81univention-nfs-server.inst
EXITCODE=already_executed
RUNNING 90univention-bind-post.inst
EXITCODE=already_executed
RUNNING 91univention-saml.inst
EXITCODE=already_executed
RUNNING 92univention-management-console-web-server.inst
EXITCODE=already_executed
RUNNING 96univention-samba4.inst
EXITCODE=already_executed
RUNNING 97univention-s4-connector.inst
EXITCODE=already_executed
RUNNING 98univention-pkgdb-tools.inst
EXITCODE=already_executed
RUNNING 98univention-samba4-dns.inst
EXITCODE=already_executed

Sun Nov 5 04:50:08 EST 2017
univention-run-join-scripts finished


univention-run-join-scripts started
Sun Nov 5 20:27:43 EST 2017

RUNNING 01univention-ldap-server-init.inst
EXITCODE=already_executed
RUNNING 02univention-directory-notifier.inst
EXITCODE=already_executed
RUNNING 03univention-directory-listener.inst
EXITCODE=already_executed
RUNNING 04univention-ldap-client.inst
EXITCODE=already_executed
RUNNING 05univention-bind.inst
EXITCODE=already_executed
RUNNING 08univention-apache.inst
EXITCODE=already_executed
RUNNING 10univention-ldap-server.inst
EXITCODE=already_executed
RUNNING 11univention-heimdal-init.inst
EXITCODE=already_executed
RUNNING 11univention-pam.inst
EXITCODE=already_executed
RUNNING 15univention-directory-notifier-post.inst
EXITCODE=already_executed
RUNNING 15univention-heimdal-kdc.inst
EXITCODE=already_executed
RUNNING 18python-univention-directory-manager.inst
EXITCODE=already_executed
RUNNING 20univention-directory-policy.inst
EXITCODE=already_executed
RUNNING 20univention-join.inst
EXITCODE=already_executed
RUNNING 25univention-dhcp.inst
EXITCODE=already_executed
RUNNING 26univention-nagios-common.inst
EXITCODE=already_executed
RUNNING 30univention-appcenter.inst
EXITCODE=already_executed
RUNNING 30univention-nagios-client.inst
EXITCODE=already_executed
RUNNING 31univention-nagios-ad-connector.inst
EXITCODE=already_executed
RUNNING 31univention-nagios-s4-connector.inst
EXITCODE=already_executed
RUNNING 31univention-nagios-samba.inst
EXITCODE=already_executed
RUNNING 33univention-portal.inst
EXITCODE=already_executed
RUNNING 34univention-management-console-server.inst
EXITCODE=already_executed
RUNNING 34univention-self-service.inst
EXITCODE=already_executed
RUNNING 35univention-appcenter-docker.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-adconnector.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-adtakeover.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-appcenter.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-diagnostic.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-ipchange.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-join.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-lib.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-mrtg.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-quota.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-reboot.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-services.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-setup.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-sysinfo.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-top.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-ucr.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-udm.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-updater.inst
EXITCODE=already_executed
RUNNING 35univention-self-service-passwordreset-umc.inst
EXITCODE=already_executed
RUNNING 35univention-server-overview.inst
EXITCODE=already_executed
RUNNING 36univention-management-console-module-apps.inst
EXITCODE=already_executed
RUNNING 40univention-postgresql.inst
EXITCODE=already_executed
RUNNING 40univention-virtual-machine-manager-schema.inst
EXITCODE=already_executed
RUNNING 78univention-kde.inst
EXITCODE=already_executed
RUNNING 80univention-radius.inst
EXITCODE=already_executed
RUNNING 81univention-ad-connector.inst
EXITCODE=already_executed
RUNNING 81univention-nfs-server.inst
EXITCODE=already_executed
RUNNING 90univention-bind-post.inst
EXITCODE=already_executed
RUNNING 91univention-saml.inst
EXITCODE=already_executed
RUNNING 92univention-management-console-web-server.inst
EXITCODE=already_executed
RUNNING 96univention-samba4.inst
EXITCODE=already_executed
RUNNING 97univention-s4-connector.inst
EXITCODE=already_executed
RUNNING 98univention-pkgdb-tools.inst
EXITCODE=already_executed
RUNNING 98univention-samba4-dns.inst
EXITCODE=already_executed

Sun Nov 5 20:27:45 EST 2017
univention-run-join-scripts finished


univention-run-join-scripts started
Wed Nov 8 02:07:48 EST 2017

RUNNING 26univention-samba.inst
2017-11-08 02:07:48.389772427-05:00 (in joinscript_init)
Not updating samba/role
Setting samba/domain/security
Multifile: /etc/samba/smb.conf
Setting samba/autostart
Module: autostart
Multifile: /etc/samba/smb.conf
Not updating samba/autostart
Stopping winbind (via systemctl): winbind.service.
Setting samba/user
Not updating samba/user/pwdfile
Multifile: /etc/samba/smb.conf
Setting stored password for "cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com" in secrets.tdb
setting idmap secret for '*' from /etc/machine.secret
Secret stored
Restarting samba (via systemctl): samba.service.
Object modified: cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com
Failed to join domain: failed to find DC for domain HC - Undetermined error
Failed to join domain: failed to lookup DC info for domain 'HC' over rpc: No logon servers
Failed to join domain: failed to lookup DC info for domain 'HC' over rpc: No logon servers
ERROR: Failed to join via net rpc join. Please check your Samba DCs and your DNS and WINS configuration.
EXITCODE=1

Wed Nov 8 02:08:10 EST 2017
univention-run-join-scripts finished

The DNS server is on the Windows Server 2012 R2 domain controller.

Any ideas what might be causing this? Let me know if you need any other information, thanks.

drohm · November 13, 2017, 6:01am

No one has seen this particular error? Ugh.

botner · November 13, 2017, 9:53am

Hi,

what is the value of the “windows/domain” UCR variable (ucr get windows/domain). I think this is set to the second part of the FQDN of the system (with dot as separator) during the installation (and is most probably HC on your system).
Maybe it is enough to change this to “HC-MYSITE” (ust set windows/domain=“HC-MYSITE”).

Best regards,
Felix

drohm · November 13, 2017, 3:13pm

it’s currently set to ‘HC’. It needs to be ‘HC-MYSITE’. How do I go about changing this value?

botner · November 13, 2017, 3:50pm

ucr set windows/domain=“HC-MYSITE” on the command line.

Best regards,
Felix

drohm · November 15, 2017, 6:18am

I tried changing to ‘HC-MYSITE’, ‘HC.MYSITE’, and ‘HC.MYSITE.COM’ and all still failed. My domain controller is running Windows 2K12 R2, is there anything I need to enable to do on it for this server to join the domain?

botner · November 16, 2017, 5:51pm

The netbios domain should be ‘HC-MYSITE’ (the same as on the windows server, please re-check), dots are not allowed in netbios domain names.

Can you give me the join.log from the test with windows/domain=“HC-MYSITE”?

best regards,
Felix

drohm · November 16, 2017, 6:21pm

Here is the latest attempt to join using ‘HC-MYSITE’.

.
.
.
RUNNING 35univention-management-console-module-udm.inst
EXITCODE=already_executed
RUNNING 35univention-management-console-module-updater.inst
EXITCODE=already_executed
RUNNING 35univention-self-service-passwordreset-umc.inst
EXITCODE=already_executed
RUNNING 35univention-server-overview.inst
EXITCODE=already_executed
RUNNING 36univention-management-console-module-apps.inst
EXITCODE=already_executed
RUNNING 40univention-postgresql.inst
EXITCODE=already_executed
RUNNING 40univention-virtual-machine-manager-schema.inst
EXITCODE=already_executed
RUNNING 78univention-kde.inst
EXITCODE=already_executed
RUNNING 80univention-radius.inst
EXITCODE=already_executed
RUNNING 81univention-ad-connector.inst
EXITCODE=already_executed
RUNNING 81univention-nfs-server.inst
EXITCODE=already_executed
RUNNING 90univention-bind-post.inst
EXITCODE=already_executed
RUNNING 91univention-saml.inst
EXITCODE=already_executed
RUNNING 92univention-management-console-web-server.inst
EXITCODE=already_executed
RUNNING 96univention-samba4.inst
EXITCODE=already_executed
RUNNING 97univention-s4-connector.inst
EXITCODE=already_executed
RUNNING 98univention-pkgdb-tools.inst
EXITCODE=already_executed
RUNNING 98univention-samba4-dns.inst
EXITCODE=already_executed

Sun Nov 5 20:27:45 EST 2017
univention-run-join-scripts finished


univention-run-join-scripts started
Wed Nov 8 02:07:48 EST 2017

RUNNING 26univention-samba.inst
2017-11-08 02:07:48.389772427-05:00 (in joinscript_init)
Not updating samba/role
Setting samba/domain/security
Multifile: /etc/samba/smb.conf
Setting samba/autostart
Module: autostart
Multifile: /etc/samba/smb.conf
Not updating samba/autostart
Stopping winbind (via systemctl): winbind.service.
Setting samba/user
Not updating samba/user/pwdfile
Multifile: /etc/samba/smb.conf
Setting stored password for "cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com" in secrets.tdb
setting idmap secret for '*' from /etc/machine.secret
Secret stored
Restarting samba (via systemctl): samba.service.
Object modified: cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com
Failed to join domain: failed to find DC for domain HC - Undetermined error
Failed to join domain: failed to lookup DC info for domain 'HC' over rpc: No logon servers
Failed to join domain: failed to lookup DC info for domain 'HC' over rpc: No logon servers
ERROR: Failed to join via net rpc join. Please check your Samba DCs and your DNS and WINS configuration.
EXITCODE=1

Wed Nov 8 02:08:10 EST 2017
univention-run-join-scripts finished


univention-run-join-scripts started
Wed Nov 8 02:24:22 EST 2017

RUNNING 26univention-samba.inst
2017-11-08 02:24:22.614228471-05:00 (in joinscript_init)
Not updating samba/role
Setting samba/domain/security
Multifile: /etc/samba/smb.conf
Setting samba/autostart
Module: autostart
Multifile: /etc/samba/smb.conf
Not updating samba/autostart
Stopping winbind (via systemctl): winbind.service.
Setting samba/user
Not updating samba/user/pwdfile
Multifile: /etc/samba/smb.conf
Setting stored password for "cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com" in secrets.tdb
setting idmap secret for '*' from /etc/machine.secret
Secret stored
Restarting samba (via systemctl): samba.service.
Object modified: cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com
Failed to join domain: failed to find DC for domain HC - Undetermined error
Failed to join domain: failed to lookup DC info for domain 'HC' over rpc: No logon servers
Failed to join domain: failed to lookup DC info for domain 'HC' over rpc: No logon servers
ERROR: Failed to join via net rpc join. Please check your Samba DCs and your DNS and WINS configuration.
EXITCODE=1

Wed Nov 8 02:24:44 EST 2017
univention-run-join-scripts finished


univention-run-join-scripts started
Wed Nov 8 02:46:15 EST 2017

RUNNING 26univention-samba.inst
2017-11-08 02:46:15.649761481-05:00 (in joinscript_init)
Not updating samba/role
Setting samba/domain/security
Multifile: /etc/samba/smb.conf
Setting samba/autostart
Module: autostart
Multifile: /etc/samba/smb.conf
Not updating samba/autostart
Stopping winbind (via systemctl): winbind.service.
Setting samba/user
Not updating samba/user/pwdfile
Multifile: /etc/samba/smb.conf
Setting stored password for "cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com" in secrets.tdb
setting idmap secret for '*' from /etc/machine.secret
Secret stored
Restarting samba (via systemctl): samba.service.
Object modified: cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com
Failed to join domain: failed to find DC for domain HC - Undetermined error
Failed to join domain: failed to lookup DC info for domain 'HC' over rpc: No logon servers
Failed to join domain: failed to lookup DC info for domain 'HC' over rpc: No logon servers
ERROR: Failed to join via net rpc join. Please check your Samba DCs and your DNS and WINS configuration.
EXITCODE=1

Wed Nov 8 02:46:35 EST 2017
univention-run-join-scripts finished


univention-run-join-scripts started
Mon Nov 13 19:05:44 EST 2017

RUNNING 26univention-samba.inst
2017-11-13 19:05:44.059098910-05:00 (in joinscript_init)
Not updating samba/role
Setting samba/domain/security
Multifile: /etc/samba/smb.conf
Setting samba/autostart
Module: autostart
Multifile: /etc/samba/smb.conf
Not updating samba/autostart
Stopping winbind (via systemctl): winbind.service.
Setting samba/user
Not updating samba/user/pwdfile
Multifile: /etc/samba/smb.conf
Setting stored password for "cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com" in secrets.tdb
setting idmap secret for '*' from /etc/machine.secret
Secret stored
Restarting samba (via systemctl): samba.service.
Object modified: cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com
Failed to join domain: failed to lookup DC info for domain 'HC-MYSITE' over rpc: Logon failure
Failed to join domain: failed to lookup DC info for domain 'HC-MYSITE' over rpc: No logon servers
Failed to join domain: failed to lookup DC info for domain 'HC-MYSITE' over rpc: No logon servers
ERROR: Failed to join via net rpc join. Please check your Samba DCs and your DNS and WINS configuration.
EXITCODE=1

Mon Nov 13 19:06:05 EST 2017
univention-run-join-scripts finished


univention-run-join-scripts started
Mon Nov 13 21:17:41 EST 2017

RUNNING 26univention-samba.inst
2017-11-13 21:17:41.287563024-05:00 (in joinscript_init)
Not updating samba/role
Setting samba/domain/security
Multifile: /etc/samba/smb.conf
Setting samba/autostart
Module: autostart
Multifile: /etc/samba/smb.conf
Not updating samba/autostart
Stopping winbind (via systemctl): winbind.service.
Setting samba/user
Not updating samba/user/pwdfile
Multifile: /etc/samba/smb.conf
Setting stored password for "cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com" in secrets.tdb
setting idmap secret for '*' from /etc/machine.secret
Secret stored
Restarting samba (via systemctl): samba.service.
Object modified: cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com
Failed to join domain: failed to find DC for domain HC.MYSITE - Undetermined error
Failed to join domain: failed to lookup DC info for domain 'HC.MYSITE' over rpc: No logon servers
Failed to join domain: failed to lookup DC info for domain 'HC.MYSITE' over rpc: No logon servers
ERROR: Failed to join via net rpc join. Please check your Samba DCs and your DNS and WINS configuration.
EXITCODE=1

Mon Nov 13 21:17:51 EST 2017
univention-run-join-scripts finished


univention-run-join-scripts started
Mon Nov 13 21:19:16 EST 2017

RUNNING 26univention-samba.inst
2017-11-13 21:19:16.280576036-05:00 (in joinscript_init)
Not updating samba/role
Setting samba/domain/security
Multifile: /etc/samba/smb.conf
Setting samba/autostart
Module: autostart
Multifile: /etc/samba/smb.conf
Not updating samba/autostart
Stopping winbind (via systemctl): winbind.service.
Setting samba/user
Not updating samba/user/pwdfile
Multifile: /etc/samba/smb.conf
Setting stored password for "cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com" in secrets.tdb
setting idmap secret for '*' from /etc/machine.secret
Secret stored
Restarting samba (via systemctl): samba.service.
Object modified: cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com
Failed to join domain: failed to find DC for domain HC.MYSITE.COM - Undetermined error
Failed to join domain: failed to lookup DC info for domain 'HC.MYSITE.COM' over rpc: No logon servers
Failed to join domain: failed to lookup DC info for domain 'HC.MYSITE.COM' over rpc: No logon servers
ERROR: Failed to join via net rpc join. Please check your Samba DCs and your DNS and WINS configuration.
EXITCODE=1

Mon Nov 13 21:19:25 EST 2017
univention-run-join-scripts finished


univention-run-join-scripts started
Mon Nov 13 21:26:03 EST 2017

RUNNING 26univention-samba.inst
2017-11-13 21:26:03.858077535-05:00 (in joinscript_init)
Not updating samba/role
Setting samba/domain/security
Multifile: /etc/samba/smb.conf
Setting samba/autostart
Module: autostart
Multifile: /etc/samba/smb.conf
Not updating samba/autostart
Stopping winbind (via systemctl): winbind.service.
Setting samba/user
Not updating samba/user/pwdfile
Multifile: /etc/samba/smb.conf
Setting stored password for "cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com" in secrets.tdb
setting idmap secret for '*' from /etc/machine.secret
Secret stored
Restarting samba (via systemctl): samba.service.
Object modified: cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com
Failed to join domain: failed to find DC for domain HC.MYSITE.COM - Undetermined error
Failed to join domain: failed to lookup DC info for domain 'HC.MYSITE.COM' over rpc: No logon servers
Failed to join domain: failed to lookup DC info for domain 'HC.MYSITE.COM' over rpc: No logon servers
ERROR: Failed to join via net rpc join. Please check your Samba DCs and your DNS and WINS configuration.
EXITCODE=1

Mon Nov 13 21:26:13 EST 2017
univention-run-join-scripts finished


univention-run-join-scripts started
Mon Nov 13 22:33:48 EST 2017

RUNNING 26univention-samba.inst
2017-11-13 22:33:48.707707108-05:00 (in joinscript_init)
Not updating samba/role
Setting samba/domain/security
Multifile: /etc/samba/smb.conf
Setting samba/autostart
Module: autostart
Multifile: /etc/samba/smb.conf
Not updating samba/autostart
Stopping winbind (via systemctl): winbind.service.
Setting samba/user
Not updating samba/user/pwdfile
Multifile: /etc/samba/smb.conf
Setting stored password for "cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com" in secrets.tdb
setting idmap secret for '*' from /etc/machine.secret
Secret stored
Restarting samba (via systemctl): samba.service.
Object modified: cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com
Failed to join domain: failed to find DC for domain HC.MYSITE.COM - Undetermined error
Failed to join domain: failed to lookup DC info for domain 'HC.MYSITE.COM' over rpc: No logon servers
Failed to join domain: failed to lookup DC info for domain 'HC.MYSITE.COM' over rpc: No logon servers
ERROR: Failed to join via net rpc join. Please check your Samba DCs and your DNS and WINS configuration.
EXITCODE=1

Mon Nov 13 22:33:58 EST 2017
univention-run-join-scripts finished


univention-run-join-scripts started
Thu Nov 16 13:11:38 EST 2017

RUNNING 26univention-samba.inst
2017-11-16 13:11:38.386198618-05:00 (in joinscript_init)
Not updating samba/role
Setting samba/domain/security
Multifile: /etc/samba/smb.conf
Setting samba/autostart
Module: autostart
Multifile: /etc/samba/smb.conf
Not updating samba/autostart
Stopping winbind (via systemctl): winbind.service.
Setting samba/user
Not updating samba/user/pwdfile
Multifile: /etc/samba/smb.conf
Setting stored password for "cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com" in secrets.tdb
setting idmap secret for '*' from /etc/machine.secret
Secret stored
Restarting samba (via systemctl): samba.service.
Object modified: cn=scifdc06,cn=dc,cn=computers,dc=hc,dc=mysite,dc=com
Failed to join domain: failed to lookup DC info for domain 'HC-MYSITE' over rpc: Logon failure
Failed to join domain: failed to lookup DC info for domain 'HC-MYSITE' over rpc: No logon servers
Failed to join domain: failed to lookup DC info for domain 'HC-MYSITE' over rpc: No logon servers
ERROR: Failed to join via net rpc join. Please check your Samba DCs and your DNS and WINS configuration.
EXITCODE=1

Thu Nov 16 13:11:59 EST 2017
univention-run-join-scripts finished

I couldn’t attach the full log as it was larger than what is allowed and I can’t upload the log as I’m a new user.

botner · November 23, 2017, 12:37pm

Hi,

at least we know now that ‘ucr set windows/domain=“HC-MYSITE”’ is correct (with that domain name the join fails with Logon failure instead of Undetermined error )

Next, the samba join used the “net rpc join”, which is wrong when trying to join in an AD domain (rpc is for NT domains). During the member mode installation/join of an UCS system normally the UCR variable ad/member is set to ads and then samba then knows to use net ads join.

How is this UCR variable set on your system (ucr get ad/member)?
How do you installed the system (UCS Master, then the “Active Directory Connection” App and the AD Member Mode via the UMC module “Active Directory Connection”)?

best regards,
Felix

drohm · November 27, 2017, 7:33am

Issuing ‘ucr get ad/member’ returns nothing, apparently it’s not set?

For the installation type, during installation I selected ‘Join into an existing Active Directory domain’. I then installed the ‘Active Directory Connection’ app. Did I miss doing anything?

botner · November 30, 2017, 3:47pm

Hi

ok, please try to install a new UCS System (master) with ‘Join into an existing Active Directory domain’ but without selecting the 'Active Directory Connection’ (without any additional component).

best regards
Felix