samba - Dec 2018 - Unable to join a new dc to the domain.

Hi,

I am trying to join a new 4.9.3 DC to an existing samba domain using 
https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory
as a guide.

I have the resolver pointed to the 2 existing DC's and names resolution is
working.
I am able to get a kerberos ticket.

When I try to join the domain I get the following:

(vdc3 pts3) # samba-tool domain join kmg.mydomain.com
-U"KMG\administrator" --dns-backend=BIND9_DLZ
--option='idmap_ldb:use rfc2307 = yes'
Password for [KMG\administrator]:
WARNING: talloc_steal with references at ../lib/talloc/talloc.c:2075
         reference at ../lib/talloc/pytalloc_util.c:182
Joined domain KMG (S-1-5-21-3052942767-4183929206-737583365)
(vdc3 pts3) #

As you can see above it says it joined but it does not appear to have completed
correctly. The other DC's do not recognize it as a DC, and the only file in
/usr/local/samba/private is secrets.ldb.

If it matters the existing DC's one is running 4.7.7 and the other is
running
4.8.7. The plan is to replace both of them with new vm's running 4.9.3.

Can someone give ma an idea of what I could be doing wrong?

Regards,

-- 
Tom			me at tdiehl.org

On Tue, 4 Dec 2018 15:06:48 -0500 (EST)
Tom Diehl via samba <samba at lists.samba.org> wrote:
> Hi,
> 
> I am trying to join a new 4.9.3 DC to an existing samba domain using 
>
https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory
> as a guide.
> 
> I have the resolver pointed to the 2 existing DC's and names
> resolution is working. I am able to get a kerberos ticket.
> 
> When I try to join the domain I get the following:
> 
> (vdc3 pts3) # samba-tool domain join kmg.mydomain.com
> -U"KMG\administrator" --dns-backend=BIND9_DLZ
--option='idmap_ldb:use
> rfc2307 = yes' 
If that is the exact command you used, you forgot 'DC'
It should have been:

samba-tool domain join kmg.mydomain.com DC -U"KMG\administrator"
--dns-backend=BIND9_DLZ --option='idmap_ldb:use rfc2307 = yes'

Rowland