Joining Active Directory Domain

Phil Mayers p.mayers at imperial.ac.uk
Tue Jan 31 18:16:09 CET 2012


On 01/31/2012 03:32 PM, Gilmour, Scott wrote:
> Hi,
>
> I am following the FreeRadius Beginners Guide book on how to
>
> join a domain. I keep on getting this error when running the command.
>
> root at FreeRadius:/etc# net ads join -U Administrator
>
> Enter Administrator's password:
>
> Using short domain name -- SQA
>
> Joined 'FREERADIUS' to realm 'SQA.net'
>
> [2012/01/31 10:21:29, 0] libads/kerberos.c:333(ads_kinit_password)
>
> kerberos_kinit_password FREERADIUS$@SQA.NET failed: Clock skew too great
>
> No DNS domain configured for freeradius. Unable to perform DNS Update.
>
> DNS update failed!


This is Samba being annoying.

The "net ads" stuff "cares" about your hostname, i.e.

$ hostname
freeradius

...won't work. You can fool it by temporarily changing your domain to:

$ hostname freeradius.soa.net




More information about the Freeradius-Users mailing list