[OmniOS-discuss] Support for AD join when SMBv1 is disabled?

[Guenther Alka]

You should add this to
https://www.illumos.org/issues/9735

as this can be fixed at Illumos only.



Am 11.10.2018 um 20:55 schrieb Omen Wild:
> Our AD forest admins just disabled SMBv1 support this morning and our AD
> joined OmniOSce boxes (freshly upgraded to r151026w) can no longer talk
> to the forest. I have tried removing and re-staging the computer object
> in AD but it still won't join.
>
> The command I run:
>
> root at metro-sequoia:~/ # smbadm join -y -u my-admin-account OUR.DOMAIN.EDU
> Enter domain password:
> Joining OUR.DOMAIN.EDU ... this may take a minute ...
> failed to join domain OUR.DOMAIN.EDU
> using AD server: oudc6c.our.domain.edu
> Failed getting initial credentials.  (Wrong password?)
> Please refer to the service log for more information.
>
> And yes, I've retried multiple times to make sure I did not mess up my
> password.
>
> Full debug log below.
>
> Any clues?
>
> Thanks,
>     Omen
>
> Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 814963 daemon.debug] smbd: join domain: OUR.DOMAIN.EDU
> Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 727883 daemon.info] smbd_dc_monitor_refresh
> Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 288469 daemon.debug] smb_ddiscover_refresh set cfg changed
> Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 164070 daemon.debug] smbd_dc_monitor: config changed
> Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 467060 daemon.debug] smb_ddiscover_service: not a domain member
> Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 243688 daemon.debug] smb_ddiscover_service waiting
> Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 467060 daemon.debug] smb_ddiscover_service: not a domain member
> Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 243688 daemon.debug] smb_ddiscover_service waiting
> Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 510351 daemon.notice] smb_locate_dc status 0xc00000dc
> Oct 11 11:46:40 metro-sequoia.our.domain.edu smbd[766]: [ID 199031 daemon.notice] smbd_dc_update: our.domain.edu: locate failed
> Oct 11 11:46:40 metro-sequoia.our.domain.edu idmap[433]: [ID 650504 daemon.info] LDAP: oudc4c.our.domain.edu:3268: Local error
> Oct 11 11:46:40 metro-sequoia.our.domain.edu idmap[433]: [ID 452651 daemon.error] adutils: ldap_lookup_init failed
> Oct 11 11:46:41 metro-sequoia.our.domain.edu smbd[766]: [ID 149131 daemon.info] smbd: found AD server oudc4c.our.domain.edu
> Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 931549 daemon.error] ndr_rpc_bind: smbrdr_ctx_new(Srv=oudc4c.our.domain.edu Dom=OUR.DOMAIN.EDU User=my-admin-account), NETWORK_ACCESS_DENIED (0xc0000$
> Oct 11 11:46:42 metro-sequoia.our.domain.edu last message repeated 2 times
> Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 972153 daemon.error] smbns_krb: getting initial credentials (Cannot determine realm for host)
> Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 871254 daemon.error] smbd: failed joining OUR.DOMAIN.EDU (UNSUCCESSFUL)
> Oct 11 11:46:42 metro-sequoia.our.domain.edu idmap[433]: [ID 864022 daemon.debug] No domain name specified.
> Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 727883 daemon.info] smbd_dc_monitor_refresh
> Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 288469 daemon.debug] smb_ddiscover_refresh set cfg changed
> Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 164070 daemon.debug] smbd_dc_monitor: config changed
> Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 467060 daemon.debug] smb_ddiscover_service: not a domain member
> Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 243688 daemon.debug] smb_ddiscover_service waiting
> Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 467060 daemon.debug] smb_ddiscover_service: not a domain member
> Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 243688 daemon.debug] smb_ddiscover_service waiting
> Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 510351 daemon.notice] smb_locate_dc status 0xc00000dc
> Oct 11 11:46:42 metro-sequoia.our.domain.edu smbd[766]: [ID 199031 daemon.notice] smbd_dc_update: our.domain.edu: locate failed
>