Joining Active Directory Domain
Hi, I am following the FreeRadius Beginners Guide book on how to join a domain. I keep on getting this error when running the command. root@FreeRadius:/etc# net ads join -U Administrator Enter Administrator's password: Using short domain name -- SQA Joined 'FREERADIUS' to realm 'SQA.net' [2012/01/31 10:21:29, 0] libads/kerberos.c:333(ads_kinit_password) kerberos_kinit_password FREERADIUS$@SQA.NET failed: Clock skew too great No DNS domain configured for freeradius. Unable to perform DNS Update. DNS update failed! root@FreeRadius:/etc# I have checked the clock, added the dns forward lookup zone to the AD Doman. Add the AD Server to the resolv.conf and etc/hosts files. I am able to ping both servers. I am attempting to join my FreeRadius domain to my 2008 Server Active Directory Domain. Thanks Scott
Gilmour, Scott wrote:
I have checked the clock, added the dns forward lookup zone to the AD Doman.
Add the AD Server to the resolv.conf and etc/hosts files. I am able to ping both servers.
Weird. Try following my guide: http://deployingradius.com/ I haven't heard of any issues with it. Alan DeKok.
On 01/31/2012 03:32 PM, Gilmour, Scott wrote:
Hi,
I am following the FreeRadius Beginners Guide book on how to
join a domain. I keep on getting this error when running the command.
root@FreeRadius:/etc# net ads join -U Administrator
Enter Administrator's password:
Using short domain name -- SQA
Joined 'FREERADIUS' to realm 'SQA.net'
[2012/01/31 10:21:29, 0] libads/kerberos.c:333(ads_kinit_password)
kerberos_kinit_password FREERADIUS$@SQA.NET failed: Clock skew too great
No DNS domain configured for freeradius. Unable to perform DNS Update.
DNS update failed!
This is Samba being annoying. The "net ads" stuff "cares" about your hostname, i.e. $ hostname freeradius ...won't work. You can fool it by temporarily changing your domain to: $ hostname freeradius.soa.net
participants (3)
-
Alan DeKok -
Gilmour, Scott -
Phil Mayers