I have UCS that took over an AD from a windows server; it is running Samba AD. It has been working for several years now. However, since the take-over, the system diagnostic tool has always reported KDC issues. I tried to troubleshoot many times, the error message changes but the problem remains. At this stage the diagnostic message is: No reachable KDCs were found.
The weird thing is that the UCS does properly act as Kerberos server. The AD domain works perfectly. I can get tickets using kinit/klist either remotely from windows workstations or locally from the UCS Linux shell.
This all means that the error message is incorrect. I understand that Samba AD runs its own KDC and that the regular KDC shouldn’t be working (a registry variable disables the KDC).
One other issue that I have is that I am unable to add a backup UCS controller to the network. Every attempt failed, the new controller is unable to join as a controller (It joins as a machine but can’t become a controller). I am not happy to run without a backup.
My questions are the following:
- Any idea how to fix.
- If I can’t fix it, should I worry?
- Could this be be why I am unable to add a backup DC?