Verifying you are Joining the Active Directory Domain
Hi, I was able to figure out my clock skew issue. I had to go to regedit on my 2008 Server and goto: HKEY_LOCAL_MACHINE>SYSTEM>Current Control Set>services>W32Time> Parameters Then select NTP Server to change the server address ip and change the Type to NTP I was able to join the domain correctly and from what I Understand I should see it added as A computer on my Windows 2008 Server PC. But when I do a wbinfo -u I do not see my domain users listed. I was wondering if this is because we installed winbind4 rather than winbind? Thanks for everyones help, Scott root@FreeRadius:/etc/init.d# net ads testjoin Join is OK root@FreeRadius:/etc/init.d# net ads info LDAP server: 20.1.180.55 LDAP server name: 2008ServerR2.SQA.net Realm: SQA.NET Bind Path: dc=SQA,dc=NET LDAP port: 389 Server time: Thu, 02 Feb 2012 09:27:31 EST KDC server: 20.1.180.55 Server time offset: -124 root@FreeRadius:/etc/init.d# wbinfo -u Error looking up domain users root@FreeRadius:/etc/init.d#
Gilmour, Scott wrote:
I was able to figure out my clock skew issue. I had to go to regedit on my 2008 Server and goto: HKEY_LOCAL_MACHINE>SYSTEM>Current Control Set>services>W32Time> Parameters Then select NTP Server to change the server address ip and change the Type to NTP
That's good.
I was able to join the domain correctly and from what I Understand I should see it added as A computer on my Windows 2008 Server PC. But when I do a wbinfo -u I do not see my domain users listed.
Are you sure that the users joined the domain? Logging in via 802.1X is just authentication. It isn't joining the domain. To join the domain, the client PC must use the Windows protocols after 802.1X has finished. Alan DeKok.
On 02/02/2012 02:45 PM, Gilmour, Scott wrote:
Hi, I was able to figure out my clock skew issue. I had to go to regedit on my 2008 Server and goto: HKEY_LOCAL_MACHINE>SYSTEM>Current Control Set>services>W32Time> Parameters Then select NTP Server to change the server address ip and change the Type to NTP I was able to join the domain correctly and from what I Understand I should see it added as A computer on my Windows 2008 Server PC. But when I do a wbinfo -u I do not see my domain users listed. I was wondering if this is because we installed winbind4 rather than winbind?
This is really a Samba problem, and you need to seek help in appropriate places, such as the Samba list.
Il 02/02/2012 15:45, Gilmour, Scott ha scritto:
I was wondering if this is because we installed winbind4 rather than winbind? DON'T! Samba4 is not yet ok for production. Use samba-winbind-3.5.11 . After basic config of smb.conf (I posted mine some days ago) you can do: net ads join -U admin.user@AD.KRB5.REALM -- it asks admin's password and should tell "join OK". AD.KRB5.REALM must be properly configured in DNS (AD does it automatically) or you'll have to configure /etc/krb5.conf . Machine account should already have been created in AD.
BYtE, Diego.
participants (4)
-
Alan DeKok -
Gilmour, Scott -
NdK -
Phil Mayers