[7.075] Joining AD does not work for .local domains [CONFIRMED]

[AlexE]

Thanks all for the continual updates about this. I'm using Small Buisness Server which is why I've gone for the .local domain. I'm happy to do the host.conf mod for now, but ASG's shell warns me that any mods by 'root' will void my support agreement. Can I assume that this particular mod is 'allowed'?

[AlexE]

I've set up 7.075 on a virtual PC with a connection to my LAN. After doing the host.conf mod, I can successfully perform a ping check on network hosts using their dns hostname e.g. myhost.mydomain.local.
However, I stll can't join the domain e.g. mydomain.local. The message 'joining the domain failed' is returned. After a refresh, the status is updated to 'joined domain mydomain.local'.
This is also the result after attempting to join 'anydomain.anything', using any admin username.

[BrucekConvergent]

Good... Just want to make sure we'll have a smooth transition to 7.100, sounds like you guys have it handled.

[Scott_Klassen]

Would this issue also affect a .corp domain?

[svens]

Originally Posted by Scott_Klassen

Would this issue also affect a .corp domain?

No,

this affects only .local domains. Do you have any problems joining AD, or is this question just out of curiosity?

Cheers,

Sven.

[amcycler]

brand new install and updated to version 7.080. Still can not join AD domain. Fallback logs gives this error message - net: ads_connect: Operations error. when i run kinit from the shell the message "Cannot contact any KDC for the requested realm ...". This is a W2k domain in native mode. I can ping the DC from the web interface and from the command line. I can also authenticate against the DC when logging into the Web Portal using a user with remote authentication.

[Scott_Klassen]

The .corp question was just to be knowledgable in advance of upgrading my production work ASG 220, since that is the domain suffix in use within the environment.

[tom]

amcycler, to see if your DNS can resolve correctly, please try running:

host -t srv _ldap._tcp.dc._msdcs.<YOURADSDOMAIN>

on the ASG.

For example:

host:/root # host -t srv _ldap._tcp.dc._msdcs.intranet.astaro.de
_ldap._tcp.dc._msdcs.intranet.astaro.de has SRV record 0 100 389 dc9.intranet.astaro.de.
_ldap._tcp.dc._msdcs.intranet.astaro.de has SRV record 0 100 389 dc1.intranet.astaro.de.
_ldap._tcp.dc._msdcs.intranet.astaro.de has SRV record 0 100 389 dc2.intranet.astaro.de.
_ldap._tcp.dc._msdcs.intranet.astaro.de has SRV record 0 100 389 dc8.intranet.astaro.de.

Do you also get SRV records for your domain with this command?

[AlexE]

Hi Tom,
I'm still having no luck joining to my AD domain. Now on version 7.086.
I've tried the host -t ... command shown above, which seems to produce the desired result.
The output of the command is:

output.jpg

It's perhaps worth mentioning that when I try to join the domain, a computer account for the ASG box is automatically created in active directory. However, in webadmin, the 'joining the domain failed' message is returned.

Thanks for the help so far...

[svens]

This seems ok - can you check that a ping server-1.chadfort.local works from the ASG? Can you post an excerpt from /var/log/fallback.log? There should be some line written why domain joining failed.

Cheers,

Sven.