Failed to join domain: failed to set machine spn: Constraint violation
in [Samba]
|
Prev: [Samba] smbmount NT_STATUS_INVALID_WORKSTATION problem
Next: Failed to join domain: failed to set machine spn: Constraint violation
From: Alex Green on 16 Dec 2008 07:20 3.0.28 and 3.0.32 - Native OS version shipped by Novell(Linux) and Sun(Solaris) Failing is the right thing to do in an MS-DNS/AD-Integrated environment, however for non-MS DNS environments disabling is going to be cleaner. -----Original Message----- From: Gerald (Jerry) Carter [mailto:jerry(a)samba.org] Sent: 15 December 2008 18:46 To: Alex Green Cc: samba(a)lists.samba.org Subject: Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alex Green wrote: > :)... it's this non-fatal error that our uses are getting > confused about and it's this that I was asking for the cli > option for... For the DDNS update we can add a disable run time option. For setting the attributes, failing is the right thing to do I believe. What version of Samba are you running? cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJRqXTIR7qMdg1EfYRAjlhAKDxjq2msUYQG6o4lKET78J55XpmpgCdFS9K Ttlu3rVaEVLz4AYEO1nqltA= =2cVK -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
From: Alex Green on 16 Dec 2008 07:40 Cross-wires (.....) AD record update (SPN or DNS) failing absolutely the right thing to do ... no question. DDNS Fail - disable option would be good ... only talking about this... not the AD bit... -----Original Message----- From: Gerald (Jerry) Carter [mailto:jerry(a)samba.org] Sent: 16 December 2008 12:36 To: Alex Green Cc: samba(a)lists.samba.org Subject: Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alex, > 3.0.28 and 3.0.32 - Native OS version shipped by Novell(Linux) and Sun(Solaris) > > Failing is the right thing to do in an MS-DNS/AD-Integrated > environment, however for non-MS DNS environments disabling is > going to be cleaner. Failing is the right thing to do period because without setting the attributes you can't do Krb5 auth. Maybe you should be using "security = domain" instead. cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJR6DIIR7qMdg1EfYRAgIMAKC6kaIxLU+v7jwWKK4UEOF/CS+dSgCg2qTh a2Ni1L3EkpPweglM5p1gG2g= =ifuH -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
From: Alex Green on 16 Dec 2008 08:10 :)... so command-line or config option do'able? -----Original Message----- From: Gerald (Jerry) Carter [mailto:jerry(a)samba.org] Sent: 16 December 2008 13:02 To: Alex Green Cc: samba(a)lists.samba.org Subject: Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alex Green wrote: > Cross-wires (.....) > > AD record update (SPN or DNS) failing absolutely the right thing to do .... no question. > > DDNS Fail - disable option would be good ... only > talking about this... not the AD bit... Ahh..ok. gotcha. Sorry for the misfire. jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJR6a0IR7qMdg1EfYRAq2KAJ9t02IzDFmKrFZMWCLZ1HJ5VBv3+gCgmLXm 2NC0Ro4ZNnZxa+lZ2rlWHTg= =fs9X -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
From: Alex Green on 16 Dec 2008 09:00 Looks fine... :)... chances this makes it into the main stream for vendor adoption? -----Original Message----- From: Gerald (Jerry) Carter [mailto:jerry(a)samba.org] Sent: 16 December 2008 13:53 To: Alex Green Cc: samba(a)lists.samba.org Subject: Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alex Green wrote: > :)... so command-line or config option do'able? Yeah. I'll see what I can do. Command line option probably. $ net ads join --disable-dns-update Look ok ? If so, I'll see if I can find some time real soon now. cheers, jerry - -- ===================================================================== Samba ------- http://www.samba.org Likewise Software --------- http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJR7KmIR7qMdg1EfYRAssTAKCgx2OqfjhnpJnbIwC1fu1tZJ9wVQCfT5Sc ZnickQA8ime2Xe6WN0Fozcc= =PvJ5 -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
From: Alex Green on 16 Dec 2008 09:10
Cool.. wasn't being impertinent.. just curious :)... -----Original Message----- From: Gerald (Jerry) Carter [mailto:jerry(a)samba.org] Sent: 16 December 2008 13:59 To: Alex Green Cc: samba(a)lists.samba.org Subject: Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alex Green wrote: > Looks fine... :)... chances this makes it into the main stream > for vendor adoption? Yeah. I don't do anything that doesn't go upstream. Unless it is really ugly. cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJR7QtIR7qMdg1EfYRAipNAJ9LYaQJH0/CqPOpiWyadWjx2/xWvwCfSjkN ziAIVy4R/wsC/w7Wj03CwvY= =Q/R3 -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba |