# Linux Gurus help please (Joining 2003 Domain)

**URL:** <https://boards.straightdope.com/t/linux-gurus-help-please-joining-2003-domain/448844>\
**Category:** Miscellaneous and Personal Stuff I Must Share\
**Created:** [May 10, 2008, 9:00pm UTC](https://boards.straightdope.com/t/linux-gurus-help-please-joining-2003-domain/448844 "2008-05-10T21:00:55Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![MannyL](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@MannyL](https://boards.straightdope.com/u/MannyL)\
**Post date:** [May 10, 2008, 9:00pm UTC](https://boards.straightdope.com/t/linux-gurus-help-please-joining-2003-domain/448844/1 "2008-05-10T21:00:55Z")

</div>

Although I haven’t been employed in a support position for a while I try to keep my skills fresh. I have a NFR 2003 R2 server running in my room. I am trying to connect a Linux system with the Ubuntu distro to it.

The Linux box is getting an IP and is on the network but I’m unable to join the domain.

I followed the [Onnoot Wiki](http://www.onnoot.com/wiki/how_to_join_ubuntu_samba_to_a_windows_2003_active_directory_domain) directions but when I issue the

sudo net ads join -U administrator

command and enter the administrator password I get the following

```auto

emanuel@dumpster:/var/log/samba$ sudo net ads join -U administrator
administrator's password: 
Using short domain name -- LEVY
Failed to set servicePrincipalNames. Please ensure that
the DNS domain of this server matches the AD domain,
Or rejoin with using Domain Admin credentials.
Deleted account for 'DUMPSTER' in realm 'LEVY.HOME'
Failed to join domain: Type or value exists
emanuel@dumpster:/var/log/samba$ 

 

```

What could my problems be?

---

<div class="post-metadata">

**Author:** ![Digital\_Stimulus](https://avatars.discourse-cdn.com/v4/letter/d/aeb1de/32.png) [@Digital\_Stimulus](https://boards.straightdope.com/u/Digital_Stimulus)\
**Post date:** [May 10, 2008, 11:45pm UTC](https://boards.straightdope.com/t/linux-gurus-help-please-joining-2003-domain/448844/2 "2008-05-10T23:45:16Z")

</div>

I’ve never tried (had to) integrate with AD. But, a cursory google yielded a guess that it’s your domain name setting. [This thread](http://readlist.com/lists/lists.samba.org/samba/2/10322.html) indicates that, in addition to including a workaround. [Here’s another](http://www.nabble.com/Failed-to-set-servicePrincipalNames-(driving-me-insane!)-to10660685.html) that mentions a similar issue. (The fix given there is to add a line to /etc/hosts specifying: IP FQDN SHORTNAME.)

Again, I have no experience here, but thought the above might help.

---

<div class="post-metadata">

**Author:** ![MannyL](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@MannyL](https://boards.straightdope.com/u/MannyL)\
**Post date:** [May 11, 2008, 12:05am UTC](https://boards.straightdope.com/t/linux-gurus-help-please-joining-2003-domain/448844/3 "2008-05-11T00:05:08Z")

</div>

Digital thanks. That leads me down the path of what is wrong. I tried the workaround in the first thread and got a different failure.

emanuel@dumpster:~ sudo net join -U adminstrator -w LEVY adminstrator's password: [2008/05/10 20:04:28, 0] libads/kerberos.c:ads\_kinit\_password(228) kerberos\_kinit\_password adminstrator@LEVY.HOME failed: Client not found in Kerberos database Failed to join domain: Improperly formed account name ADS join did not work, falling back to RPC... Could not connect to server DELLSVR2003E The username or password was not correct. Connection failed: NT\_STATUS\_LOGON\_FAILURE emanuel@dumpster:~

I will be checking the logs on the 2003 box

---

<div class="post-metadata">

**Author:** ![MannyL](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@MannyL](https://boards.straightdope.com/u/MannyL)\
**Post date:** [May 11, 2008, 1:22am UTC](https://boards.straightdope.com/t/linux-gurus-help-please-joining-2003-domain/448844/4 "2008-05-11T01:22:48Z")

</div>

Feel like I’m talking to myself. I have a new error which google did not help out on much  
emanuel@dumpster:~ sudo net ads join -U administrator administrator's password: Using short domain name -- LEVY Failed to set servicePrincipalNames. Please ensure that the DNS domain of this server matches the AD domain, Or rejoin with using Domain Admin credentials. Deleted account for 'DUMPSTER' in realm 'LEVY.HOME' Failed to join domain: Type or value exists emanuel@dumpster:~

---

<div class="post-metadata">

**Author:** ![Digital\_Stimulus](https://avatars.discourse-cdn.com/v4/letter/d/aeb1de/32.png) [@Digital\_Stimulus](https://boards.straightdope.com/u/Digital_Stimulus)\
**Post date:** [May 11, 2008, 1:57am UTC](https://boards.straightdope.com/t/linux-gurus-help-please-joining-2003-domain/448844/5 "2008-05-11T01:57:55Z")

</div>

[QUOTE=MannyL]  
Feel like I’m talking to myself.  
[/quote]  
Hey now. I may not be living up to my username, but that was uncalled for. 😉😃

So, did you modify your /etc/hosts file? It looks like you’ve got the hostname set to “LEVY.HOME”. But that most likely doesn’t match your Windows domain name (speaking from ignorance, here, so I could very well be wrong). On Linux, use the _hostname -f_ command. On Windows, it looks like (from a quick google) the _nbstat -c_ command will do it. (I’m sure there’s a GUI way, but I like the command line. Even in Windows.)

Also, I have _no_ experience with kerberos, so I’m no help there. Sorry.

ETA: I just realized that “IP FQDN SHORTNAME” may have been incomprehensible. What it means is, open the /etc/hosts file and add a line:

\<your\_IP\_address\> \<fully\_qualified\_domain\_name\> \<short\_domain\_name\>

For example, something like:

```auto

192.168.0.2 levy.home.com levy

```

---

<div class="post-metadata">

**Author:** ![MannyL](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@MannyL](https://boards.straightdope.com/u/MannyL)\
**Post date:** [May 11, 2008, 2:05am UTC](https://boards.straightdope.com/t/linux-gurus-help-please-joining-2003-domain/448844/6 "2008-05-11T02:05:35Z")

</div>

No I meant I was replying to my reply. The good news is I solved all the errors and the Linux box is part of the domain and even shows in network neighborhood. The bad part is the share is declining my password.

---

<div class="post-metadata">

**Author:** ![Digital\_Stimulus](https://avatars.discourse-cdn.com/v4/letter/d/aeb1de/32.png) [@Digital\_Stimulus](https://boards.straightdope.com/u/Digital_Stimulus)\
**Post date:** [May 11, 2008, 3:39am UTC](https://boards.straightdope.com/t/linux-gurus-help-please-joining-2003-domain/448844/7 "2008-05-11T03:39:51Z")

</div>

[QUOTE=MannyL]  
No I meant I was replying to my reply.  
[/quote]  
Yeah, I was kidding. A little levity to help get through the hit-your-head-against-the-wall computer issues. 🙂

> [@](#):
>
> The good news is I solved all the errors and the Linux box is part of the domain and even shows in network neighborhood. The bad part is the share is declining my password.

Well, glad I could get you on some path that seems to have helped. If you’re using Samba, you might want to look at the _smb.conf_, the password file (I can’t remember the name right now), and the related man pages. As if you didn’t know that already.

I wish I could help more, but to be honest, I’ve been wrestling with Samba sharing myself. Haven’t figured a fix out yet…it keeps getting superseded by other things on my priority list.

---

<div class="post-metadata">

**Author:** ![MannyL](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@MannyL](https://boards.straightdope.com/u/MannyL)\
**Post date:** [May 11, 2008, 3:52am UTC](https://boards.straightdope.com/t/linux-gurus-help-please-joining-2003-domain/448844/8 "2008-05-11T03:52:49Z")

</div>

Well it works with me just entering the name of a linux user and their password. Now I have to figure out how to supress it showing PDF & Printers & faxes since there are none on that share or system

---

<div class="post-metadata">

**Author:** ![Digital\_Stimulus](https://avatars.discourse-cdn.com/v4/letter/d/aeb1de/32.png) [@Digital\_Stimulus](https://boards.straightdope.com/u/Digital_Stimulus)\
**Post date:** [May 11, 2008, 5:56am UTC](https://boards.straightdope.com/t/linux-gurus-help-please-joining-2003-domain/448844/9 "2008-05-11T05:56:34Z")

</div>

[QUOTE=MannyL]  
Now I have to figure out how to supress it showing PDF & Printers & faxes since there are none on that share or system  
[/QUOTE]  
I think you need to set something about printers in the [global] section of _smb.conf_.

Ah, looking at the end of the [Ubuntu configuring Samba](https://help.ubuntu.com/6.06/ubuntu/serverguide/C/configuring-samba.html) guide (6.06; not sure what release you’re using), we find:

> [@](#):
>
> …You specify all shares are browseable by all clients on the network by placing a browseable directive, which takes a Boolean argument, under the [global] heading in the /etc/samba/smb.conf. That is, if you edit the file and add the line:
> 
> browseable = true
> 
> under the [global] section of /etc/samba/smb.conf, then all shares provided by your Ubuntu system via SAMBA will be browseable by all authorized clients, unless a specific share contains a browseable = false directive, which will override the global directive.

At least, I think that’s what you’re looking for.
