From: John Mulligan on

Hi Samba mailing list,

I'm having trouble setting up samba as an AD member at a remote site.
While I've joined a few samba servers to AD before I'm getting the
following error message when I try to join this domain:

Failed to join domain: failed to set machine spn: Operations error


I am running samba version 3.4.5-0.47 on Fedora and the AD is on Windows
server 2003.
I'm not finding much with searching for this exact error condition,
except one old mailing list post [1]. I've run 'net ads join' with
debugging turned up, but nothing seemed relevant except for the
final error summary:


[2010/04/06 15:54:43, 3] libsmb/clikrb5.c:729(ads_krb5_mk_req)
ads_krb5_mk_req: server marked as OK to delegate to, building forwardable TGT
[2010/04/06 15:54:43, 10] libsmb/clikrb5.c:896(get_krb5_smb_session_key)
Got KRB5 session key of length 16
[2010/04/06 15:54:43, 1] libnet/libnet_join.c:1903(libnet_Join)
libnet_Join:
libnet_JoinCtx: struct libnet_JoinCtx
out: struct libnet_JoinCtx
account_name : NULL
netbios_domain_name : 'FBAR'
dns_domain_name : 'foobar.net'
forest_name : 'foobar.net'
dn : NULL
domain_sid : *
domain_sid : S-1-5-12-8483489348-1903232839-566522115
modified_config : 0x00 (0)
error_string : 'failed to set machine spn: Operations error'
domain_is_ad : 0x01 (1)
result : WERR_GENERAL_FAILURE
[2010/04/06 15:54:43, 10] intl/lang_tdb.c:138(lang_tdb_init)
lang_tdb_init: /usr/lib/samba/C.msg: No such file or directory
[2010/04/06 15:54:43, 2] utils/net.c:779(main)
return code = -1
Failed to join domain: failed to set machine spn: Operations error


Can anyone point me in the right direction? I'm not sure what
area to start looking at to debug this particualar error.

I've attached my config files, edited for privacy.

Thanks for your time,

John


[1] http://markmail.org/message/tcb6ib2ovqomxmqa