Add NAS to DSFW Domain
I'm trying to add our Synology RS2212 NAS to the DSFW domain ...
The crypic error back from the NAS is : "join domain fail"
Interestingly, the server does get added to the Computers container
Since the NAS logs are useless, what are the best DSFW logs to try and
trace the problem
Steve
Originally Posted by thhg
I'm trying to add our Synology RS2212 NAS to the DSFW domain ...
The crypic error back from the NAS is : "join domain fail"
Interestingly, the server does get added to the Computers container
Since the NAS logs are useless, what are the best DSFW logs to try and
trace the problem
Steve
Generally in such cases samba is the culprit, and occasionally ldap.
Is it possible to take trace of packets exchanged by the server and check for smb and ldap filters.
See for the failure condition in the trace. We can take it from there....
Similar Messages
-
Cannot add Computers to DSfW domain
We have been running DSfW for a couple of years.
Recently we found we couldn't add computers to the domain any longer. Also using the MMC all the existing computers are of type mSDSComputer which the team suggest what is normally there.
Both DSfW servers are running SLES10 sp3 and eDir 8.8sp3
The logs show the following error:
Aug 11 19:00:33 dsfw1 xadsd: [NETLOGON] PC02335$ opened secure channel
Aug 11 19:00:33 dsfw1 xadsd: [NETLOGON] Setting account password for object <cn=PC1234,cn=Computers,dc=company,dc=com>
Aug 11 19:00:33 dsfw1 xadsd: [NETLOGON] Setting account password failed: Access Denied.
Googling didn't reveal much useful info.
Thanks
SimonHi,
Thanks for responding.
Originally Posted by psahukar
Hi,
Can you please try creating a computer in MMC as the same user (used for adding the computer into the domain). If the computer creation works then I think the admin rights of that user is fine.
So I would next doubt on the password policy settings. Have the NMAS password policy settings changed that you know of ?
Also try creating a user and see how it goes.
Thanks,
Praveen Kumar
Tried adding via MMC - we get an error "Windows cannot create the object because: The requested operation did not satisfy one or more constraints associated with the class of the object"
I have followed TID 7010319 as we had an issue with ldap groups thinking this may also be the problem. But it doesn't appear to be. Also as mentioned in my OP the item type in MMC is mSDSComputer which appears as an unknown object for all the currently registered computer objects.
TIA -
Joining existing OES servers running samba to DSfW domain
I fell dense for asking but I have not seen an answer to this question anywhere. I added DSfW into my environment and I had existing OES 11 (sp1) servers that had samba running and functioning well for what I needed. Now (before I upgrade to service pack 2, I would like to get some ducks in a row.
The servers that were running samba prior to the introduction of DSfW, I want to have as members of the domain.
What are the steps to do this?
Daniel Wells AIA, VCP
Senior Associate | IT Coordinator
MHTN Architects, Inc.
Direct: 801.326.3215 | www.mhtn.com
vision made realWe are a file and print shop with users demanding all sorts of ways to access their files. The three file servers in questions are set up with NSS/NCP access to the file systems with SMB (as part of a workgroup, since the DSfW domain was added later) and AFP overlaid. SMB was originally used for web access to the file systems through our SSL VPN.
I would like to join the Macs int he office to the DSfW domain and have them authenticate to the domain and have access to the files, hopefully without having to re-enter passwords for each server, and thus be able to discard AFP on the servers.
If I need to redo the SMB configuration to get it to work with DSfW, then that is alright. I'm sure I can reconfigure the VPN to access any new SMB configuration.
Daniel Wells AIA, VCP
Senior Associate | IT Coordinator
MHTN Architects, Inc.
Direct: 801.326.3215 | www.mhtn.com
vision made real
>>> ab<[email protected]> 9/12/2014 10:11 PM >>>
It may help to understand exactly what these servers are doing now, vs.
what you want them to do. Should they be DCs when done? Are you just
wanting to share files to workstations using SMB? Are there
pieces/configurations of Samba right now on those other servers that you
would like to preserve?
Good luck.
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below... -
How to add NAS for iTunes and backups
I would like to add NAS to home network of older iMac (OSX 10.7.4), win 7 notebook, soon to be added MacAir, plus iPad, iPhones, and sonos. I would like to move iTunes from iMac external drive to NAS and also use NAS for time machine backups of the 2 Macs and a backup for the win 7 notebook. Any recommendations on NAS for mostly Mac network? Can I use the NAS for both iTunes and for backups?
Most of the big brands support TM.. QNAP and Synology being the main contenders.
Moving itunes library is always dangerous and TM will not back it up.. since it is now on a network drive.. so take steps to ensure the library cannot be lost. This is of course far easier on a brand that has automatic backups and mirrored drives.. that the TC. -
Cannot add users to new domains anymore
I got messaging server and delegated admin to work just fine recently until I tried getting LDAP authentication to work so LDAP users could log into Sunrays.
I used idsconfig and saw that it added a bunch of stuff to the directory so I deleted that stuff after I realized I couldn't add users to a new domain anymore. It just says "cannot create user - unknown error". I can still add users to old domains just fine.
And I tried both DA and commadmin, neither work. Heres my Messaging server and DA version:
Sun Java(tm) System Messaging Server 6.2-3.04 (built Jul 15 2005)
libimta.so 6.2-3.04 (built 01:43:03, Jul 15 2005)
SunOS testy.i-n-control.com 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Fire-V440
Delegated Administrator 6.3-0.09
I turned on debugging for DA and heres the output:
TRACE [Wed Aug 02 10:10:47 MDT 2006] Default people container = ou=People,o=domain,dc=mail,dc=example,dc=com
TRACE [Wed Aug 02 10:10:47 MDT 2006] ServerPushThread: setting stop flag
TRACE [Wed Aug 02 10:10:47 MDT 2006] commTaskManager: progress thread stopped
TRACE [Wed Aug 02 10:10:47 MDT 2006] com.iplanet.am.sdk.AMException: Unable to create entry.
at com.iplanet.am.sdk.ldap.DirectoryManager.processInternalException(DirectoryManager.java:433)
at com.iplanet.am.sdk.ldap.DirectoryManager.createUser(DirectoryManager.java:1046)
at com.iplanet.am.sdk.ldap.DirectoryManager.createEntry(DirectoryManager.java:1525)
at com.iplanet.am.sdk.AMDirectoryManager.createEntry(AMDirectoryManager.java:651)
at com.iplanet.am.sdk.AMCacheManager.createEntry(AMCacheManager.java:337)
at com.iplanet.am.sdk.AMObjectImpl.create(AMObjectImpl.java:1009)
at com.iplanet.am.sdk.AMPeopleContainerImpl.createUser(AMPeopleContainerImpl.java:285)
at sun.comm.cli.server.servlet.CreateUser.create(CreateUser.java:677)
at sun.comm.cli.server.servlet.CreateUser.doTask(CreateUser.java:91)
at sun.comm.cli.server.servlet.commTaskManager.execute(commTaskManager.java:196)
at sun.comm.cli.server.servlet.commServlet.doPost(commServlet.java:90)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:807)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
at org.apache.catalina.core.StandardWrapperValve.invokeServletService(StandardWrapperValve.java:771)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:322)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:209)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:161)
at com.iplanet.ias.web.WebContainer.service(WebContainer.java:580)
TRACE [Wed Aug 02 10:10:47 MDT 2006] After AM Exception , msg being sent is Unable to create entry.^324^NONE
TRACE [Wed Aug 02 10:10:47 MDT 2006] in CLIPageData constructor:status = 1
TRACE [Wed Aug 02 10:10:47 MDT 2006] commTaskManager - execute => generateOutput
TRACE [Wed Aug 02 10:10:47 MDT 2006] In CLIPageGenerator ....
TRACE [Wed Aug 02 10:10:47 MDT 2006] CLIPageGenerator - generateOutput : cliData.status = 1
TRACE [Wed Aug 02 10:10:47 MDT 2006] CLIPageGenerator - generateOutput : CLIPageData.OK = 0
TRACE [Wed Aug 02 10:10:47 MDT 2006] CLIPageGenerator - generateOutput : CLIPageData.FAIL = 1
TRACE [Wed Aug 02 10:10:47 MDT 2006] Failed: Unable to create entry.^324^NONE
TRACE [Wed Aug 02 10:10:47 MDT 2006] CLIPageGenerator - generateOutput - Printing successfull results
TRACE [Wed Aug 02 10:10:47 MDT 2006] CLIPageGenerator - generateOutput - status => FAIL
TRACE [Wed Aug 02 10:10:47 MDT 2006] CLIPageGenerator - generateOutput - message => Unable to create entry.^324^NONE
TRACE [Wed Aug 02 10:10:48 MDT 2006] ServerPushThread: done
TRACE [Wed Aug 02 10:10:48 MDT 2006] ServerPushThread: done
TRACE [Wed Aug 02 10:10:49 MDT 2006] ServerPushThread: done
TRACE [Wed Aug 02 10:10:58 MDT 2006] sun.comm.cli.server.servlet.commLDAPAuth: shutting down. Total access count = 1
Message was edited by:
nate.wheelerFrankly, I'm new to LDAP so I don't know really what
changed.No time like the present to start learning.
Its weird, I can do some things, but not
others. Like I can assign service packages, but not
change the login id or password of a user. So it
doesn't look like amadmin can't change things.LDAP provides "ACI", or Access Control settings that can be changed, and create exactly the kinds of things you're looking at.
The Directory Console can view ACI
>
The password encryption seemed to have changed from
{SSHA} to {CRYPT}. Although I have no idea how to
switch it back or where to look to see if it did.Unlikely to have made any difference. That should be transparent to the application using DS.
Most of our applications don't compare the password entry, but attempt a BIND for that very reason.
Again, I'd be looking at your LDAP access logs for a clue to what's happening.
>
Message was edited by:
nate.wheeler -
I have imac 10.6.8 how to add it to my domain server windows 2003
i have imac 10.6.8 how to add it to my domain server windows 2003
and .
i cant find the directory access anyOne option is to create a new partition (~30- 50 GB), install the new OS, and ‘test drive’ it. If you like/don’t like it it, you can then remove the partition. Do a backup before you do anything. By doing this, if you don’t like it you won’t have to go though the revert process.
Check to make sure your applications are compatible.
Application Compatibility
Applications Compatibility (2) -
Exchange 2010 in a DSfW Domain?
Hi
Can i install Exchange 2010 in a DSFW only Domain or does i need a real AD Domain and then make a trust between the two domains?
Thanks
RenOriginally Posted by RENEK
Hi
Can i install Exchange 2010 in a DSFW only Domain or does i need a real AD Domain and then make a trust between the two domains?
Thanks
Ren
Hi Ren,
Installing Exchange 2010 directly into a DSfW domain will not work and is not supported. You won't even get passed the prep stage as the schema extensions that are required won't get accepted by the DSfW controllers.
Best way to go about this (if you already have DSfW setup) is to create a basic AD and define a cross forest trust between the two. Install Exchange 2010 into AD and provision the users from the DSfW domain over the trust.
If you don't have DSfW setup, using IDM (the bundle edition is licensed along with GroupWise/OES) is another option.
Cheers,
Willem -
SCCM 2007 OSD to add computer account to domain
Running SCCM 2007 R2 OSD to add computer account to domain has always been working, until recently after I added Intel 217/218 NIC drivers to the PE boot image.
The task sequence "Apply Network Settings" runs successfully though. It broke other TS steps too, such as enabling BitLocker, because, I guess, if the computer is not domain-joined, it won't be able to write recovery key to AD. I can use the same
network account to manually add the computer to domain. This doesn't seem to be a network issue, because the NIC drivers are applied, and software installation in the TS runs with no issue.
Here's the deployment log:
==============================[ OSDNetSettings.exe ]===========================
Command line: "osdnetsettings.exe" configure Setting %SystemRoot% to "D:\Windows"
Loading existing answer file "D:\Windows\panther\unattend\unattend.xml"
Configuring global network settings
Join type: 0 Joining domain: MyDomainName
Getting namespace "Microsoft-Windows-UnattendedJoin" for architecture "amd64"
DNS domain: DNS domain search order: IP filter sec enabled: false
No adapters found in environment.
Performing global configuration only.
Writing configuration information to D:\Windows\panther\unattend\unattend.xml
Successfully saved configuration information to D:\Windows\panther\unattend\unattend.xml
Configuring "OSDNetSettings.exe finalize" to run on first boot OSDNetSettings
finished: 0x00000000
Thanks and regards.Running SCCM 2007 R2 OSD to add computer account to domain has always been working, until recently after I added Intel 217/218 NIC drivers to the PE boot image.
The task sequence "Apply Network Settings" runs successfully though. It broke other TS steps too, such as enabling BitLocker, because, I guess, if the computer is not domain-joined, it won't be able to write recovery key to AD. I can use the same
network account to manually add the computer to domain. This doesn't seem to be a network issue, because the NIC drivers are applied, and software installation in the TS runs with no issue.
Here's the deployment log:
==============================[ OSDNetSettings.exe ]===========================
Command line: "osdnetsettings.exe" configure Setting %SystemRoot% to "D:\Windows"
Loading existing answer file "D:\Windows\panther\unattend\unattend.xml"
Configuring global network settings
Join type: 0 Joining domain: MyDomainName
Getting namespace "Microsoft-Windows-UnattendedJoin" for architecture "amd64"
DNS domain: DNS domain search order: IP filter sec enabled: false
No adapters found in environment.
Performing global configuration only.
Writing configuration information to D:\Windows\panther\unattend\unattend.xml
Successfully saved configuration information to D:\Windows\panther\unattend\unattend.xml
Configuring "OSDNetSettings.exe finalize" to run on first boot OSDNetSettings
finished: 0x00000000
Thanks and regards. -
RDS 2012 R2 cannot add 3rd party (parent domain) licensing server
Hi,
I have a RDS 2012 R2 farm and i cannot add a 3rd party licensing server that is in a parent domain (forest root domain - hosted by our corp HQ). I will edit deployment properties for the deployment in the first CB server to add a licensing server in per
user mode. Seemes to work, however no licenses are given to SH servers. Have made GPO aswell to explicitly specify licensing server and mode, however i think this should not be neccessary.
Any ideas?
This posting is provided "AS IS" with no warranties or guarantees and confers no rightsHi,
Thank you for posting in Windows Server Forum.
1. In Server Manager -- RDS -- Overview -- Tasks -- Edit Deployment Properties -- RD Licensing tab, please make sure that the Licensing mode is set to match the type of licenses you purchased, and that the FQDN of your RD Licensing server is listed.
2. In Server Manager -- RDS -- Collections -- <your collection> -- Host Servers, please make sure that your RDSH server is listed. If you have more than one server with the RDSH Role Service in your deployment make sure that all of them are
listed. If they are not you may click Tasks -- Add RD Session Host Servers (make sure the servers are part of the Server Manager server pool prior to this).
3. On Server 1, please open an Administrator PowerShell prompt and enter the following command:
Add-WindowsFeature RDS-Licensing-UI
4. After the above powershell command completes you should be able to open RD Licensing Manager (licmgr.exe) on Server 1 if you need to. Please note that it is more important to have the licensing configured properly in deployment properties and your
RDSH servers part of a collection than it is to be able to open RD Licensing Manager on both of your servers.
(Above one quoted from beneath thread)
Source:
RDS 2012 Can't add a licensing server
In addition, check below article.
RD Licensing Configuration on Windows Server 2012
Hope it helps!
Thanks.
Dharmesh Solanki -
Can i add a windows 2008 domain controller in a open directory ?
i want to add an windows 2008 r2 domain controller to a open directory .
is this possible, and replicated all users to active directory?Yes, You must establish a two-way trust between the central forest and user forests to enable distribution group expansion when groups from user forests are synchronized as contacts to the central forest.
Also you can refer below link
http://technet.microsoft.com/en-us/library/gg670909%28v=ocs.14%29.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical -
Hello guys,At this moment we are working with 5 different fysical sites. All of the sites have a different vlan. On one site are the servers with all of the services. At this moment the other sites are configured as workgroups. They all have there own router. If they want to do something on the server users can create a terminal session to access data ect..
Now recently all buildings are connected by a fiber. I would like to know what I have to do to connect these computers from the current workgroup to our domain?Change dns to our proper dns server on every router in the workgroup and then just add the pc to the domain? At this moment every router in the workgroup has dhcp functionality and set dns to the dns servers of the internet provider.Will the vlans still have there value after the change? I can imagine that there will be...
This topic first appeared in the Spiceworks CommunityHi
I never tried this to join remotecomputers to the domain but you can download this utility called PsExec and with the help of Netdom command you can add the computers to the domain form one computer.
http://technet.microsoft.com/en-gb/sysinternals/bb897553.aspx
Download this software and put all the files form the zip file to c:\windows\system32 folder.
Open Command promt as domain admin account once in command prompt type
psexec.exe \\remotecomputername cmd
this will take you the remote computer cmd
then use the netdom command
netdom join %computername% /domain:nameof the domain /userd:domainadminuser/passwordd:domainadminpassword /reboot:0
hope this help.
Thanks -
How to add NAS to existing Airport Extreme Base Station Network...
Hi! I have a Airport Express network (DSL provided via a DSL modem) that is connected to the PC via ethernet, iMac 333 via Wireless adapter, and Powerbook via wireless card. I am bursting at the seams with components!!
I have the printer set up via the AE.
I would like to add a NAS to the works. (Just to see if it can frustrate me even more! )
How exactly would I hook this up? Any suggestions? Has anyone done this? Have a favorite NAS device you can recommend? We are looking to install this for a centralized place to store all our music, photos, movies, etc. We have TONS of digital media to store and it is clogging up our respective hard drives!
Thanks in advance for the help!!
Minder
Ti Powerbook 15 inch Mac OS X (10.4.6) iMac Grape 333MHz, Custom built PC and a Flower Power iMac soon coming home with me too...
Ti Powerbook 15 inch Mac OS X (10.4.6) iMac Grape 333MHz alsoIt is unclear... Do you have an AirPort Extreme base station (AEBS) or AirPort Express (AX)?
If you have an AEBS then you should have this configuration:
DSL modem<->[WAN] AEBS [LAN]<->PC
If that is your current setup, you would need to modify it by adding an Ethernet switch (or hub) so that it looks like this:
DSL modem<->[WAN] AEBS [LAN]<->switch<-+->PC
.......................................|->NAS -
Hi, everyone
I need to get connected to a corporate domain, which is Windows based server.
I have both the name and address of the domain, my user name and password.
But my MBP says all the time that either "server is not existing...." or "can notfind server...."
I would appreciate some help solving this.
Thanks.
IgorHi BDAqua,
Why should we create a user again? The point is I am going to join this Mac Mini to a windows domain controller. Windows domain controller means a centralized database of an organization. It is communicating with my Domain controller. But the issue is it is not founding my domain node while joining to a domain. Please find the attached screen shots for your reference. If you have worked on this please send me step by step configuration. -
Secure script to add PCs to the domain
Hello, we are currently being tasked to utilize VMWare Mirage to upgrade our remote PCs from Windows XP to Windows 7 and readd them to the domain in a secure manner over and internet/vpn connection. We are concerned with storing AD credentials on the PCs
in order to image the computers and also concerned with the script being used to join unauthorized PCs to the domain.
Is there a secure way to store the AD credentials on the images we are pushing down within a script?
Is there a way to pre-stage computer names in AD and only allow a certain username to join pre-staged PCs within AD?Hello, we are currently being tasked to utilize VMWare Mirage to upgrade our remote PCs from Windows XP to Windows 7 and readd them to the domain in a secure manner over and internet/vpn connection. We are concerned with storing AD credentials on the PCs
in order to image the computers and also concerned with the script being used to join unauthorized PCs to the domain.
Is there a secure way to store the AD credentials on the images we are pushing down within a script?
Is there a way to pre-stage computer names in AD and only allow a certain username to join pre-staged PCs within AD? -
Is it necessary to add the computer to domain to active sso?
Hi,
We want to active sso,and the host name of ecc and portal don't have the domain,so can we make that?Hi,
the servers need to be in the same domain.
You may configure Multible Domain SSO only between Portals.
Some SAP Notes on the topic:
654326 Domain restrictions in a portal environment
701205 Single Sign-On using SAP Logon tickets
814832 Hostnames and Cookies
654982 and 654326 configuring logon ticket for multiple domain.
Regards
Johannes
Maybe you are looking for
-
where do I click to look at/select one of my bookmarks. clicked all over Firefox & can't get a list of bookmarks. thanks fred
-
I tried to import picture/video files from iPhone 5S to MacBook Pro Aperature. It appeared to be trying to download every picture I have ever taken even tho I checked do not import duplicates. The phone is not connected to lap top. It has been spi
-
T-code for list of PO with Reference to PR
Dear sir Please tell me the t code to find the PO list that has been created with Reference to RP/RFQ
-
Mobile which supports Datagram Connection in J2ME
hello I'm developing an J2ME application which needs to do a Datagram Connection. I would like to know which Mobile supports this kink of Connection in Java. Thanks in advance
-
HOWTO Get the text of "combo box" and "labe" controls with JavaAccessBridge
HOWTO Get the text of "combo box" and "labe" controls with JavaAccessBridge. Please help, I'm trying to use the Java Access Bridge (JAB) 2.1 to get the text in Java Applet controls. I've been able to use the sample code in AccessInfo.cpp sample that