PBIS Open On Ubuntu Will Not Join Domain
So here's the sitch:
For about ten years, I've used PowerBroker Identity Services Open (PBIS Open -- and before that, LikewiseOpen) to join Linux boxes to AD domains. It has always worked flawlessly. In ten years, I have literally never experienced a problem with
it.
Now I'm in Azure. I have four Win2K12r2 servers: two DCs/DNS servers and two IIS boxes. I have about 20 Ubuntu 14.04 boxes.
All the Windows servers join the domain without incident. Not a single one of the Linux boxes can join.
Here's what you see when attempting to join the domain:
[root@MSSEADTEST /opt/pbis/bin]# ./domainjoin-cli --loglevel verbose join submittalexchangeazure.net bill.stone
Joining to AD Domain: submittalexchangeazure.net
With Computer DNS Name: msseadtest.submittalexchangeazure.net
[email protected]'s password:
Error: Lsass Error [code 0x0000000b]
The OU format is invalid.
Here's the output of the logfile:
20150218110606:INFO:Domainjoin invoked with the join command (remaining arguments will be printed later):
20150218110606:INFO: [./domainjoin-cli]
20150218110606:INFO: [--loglevel]
20150218110606:INFO: [verbose]
20150218110606:INFO: [join]
20150218110606:INFO:Domainjoin invoked with 2 arg(s) to the join command:
20150218110606:INFO: [submittalexchangeazure.net]
20150218110606:INFO: [bill.stone]
20150218110606:INFO:Adding msseadtest (fqdn msseadtest.submittalexchangeazure.net) to /etc/hosts ip 127.0.0.1, removing msseadtest, msseadtest.submittalexchangeazure.net, msseadtest, msseadtest.submittalexchangeazure.net
20150218110606:INFO:Creating blank krb5.conf
20150218110606:INFO:Reading krb5 file /tmp/likewisetmpNh1Rws/etc/krb5.conf
20150218110606:INFO:Reading nsswitch file /etc/nsswitch.conf
20150218110606:INFO:Creating blank krb5.conf
20150218110606:INFO:Reading krb5 file /tmp/likewisetmpG6N3NQ/etc/krb5.conf
20150218110606:INFO:Distro Version 14.04
20150218110606:INFO:Found config file /etc/ssh/sshd_config
20150218110606:INFO:Found binary /usr/sbin/sshd
20150218110606:INFO:Reading ssh file /etc/ssh/sshd_config
20150218110606:INFO:Found open sshd version 6.6.1p1
20150218110606:INFO:Testing option ChallengeResponseAuthentication
20150218110606:INFO:Option ChallengeResponseAuthentication supported
20150218110606:INFO:Testing option UsePAM
20150218110606:INFO:Testing option PAMAuthenticationViaKBDInt
20150218110606:INFO:Option PAMAuthenticationViaKBDInt not supported
20150218110606:INFO:Testing option KbdInteractiveAuthentication
20150218110606:INFO:Option KbdInteractiveAuthentication supported
20150218110606:INFO:Testing option GSSAPIAuthentication
20150218110606:INFO:Option GSSAPIAuthentication supported
20150218110606:INFO:Testing option GSSAPICleanupCredentials
20150218110606:INFO:Option GSSAPICleanupCredentials supported
20150218110606:INFO:Found config file /etc/ssh/ssh_config
20150218110606:INFO:Found binary /usr/bin/ssh
20150218110606:INFO:Reading ssh file /etc/ssh/ssh_config
20150218110606:INFO:Testing option GSSAPIAuthentication
20150218110606:INFO:Sshd does not support -o
20150218110606:INFO:Testing option GSSAPIDelegateCredentials
20150218110606:INFO:Sshd does not support -o
20150218110611:INFO:Running module join
20150218110611:VERBOSE:eventlog:LwEvtOpenEventlog():/builder/src-buildserver/Platform-8.2/src/linux/eventlog/client/eventlog.c:174: client::eventlog.c OpenEventlog server=<null>)
20150218110611:ERROR:Lsass Error [ERROR_BAD_FORMAT]
The OU format is invalid.
Stack Trace:
/builder/src-buildserver/Platform-8.2/src/linux/domainjoin/domainjoin-cli/src/main.c:1160
/builder/src-buildserver/Platform-8.2/src/linux/domainjoin/domainjoin-cli/src/main.c:554
/builder/src-buildserver/Platform-8.2/src/linux/domainjoin/libdomainjoin/src/djmodule.c:345
/builder/src-buildserver/Platform-8.2/src/linux/domainjoin/libdomainjoin/src/djauthinfo.c:857
/builder/src-buildserver/Platform-8.2/src/linux/domainjoin/libdomainjoin/src/djauthinfo.c:1226
Interestingly enough, a machine account is created in AD as a result of the join. The Ubuntu boxes, however, don't behave as if they're joined.
Any comment is invited.
Susie:
The thing about joining Linux boxes to a domain via PBIS Open is that the machine account is extremely sparse. Linux and Windows don't speak the same language on any level, so the machine properties are very basic.
The account shows:
Computer name (pre-Win2K): MSSEADTEST (correct).
It does not show a DNS name because the client barfed and never added it to DNS.
The DC Type: Workstation or server (also correct).
There is nothing listed in the Operating System tab.
This is Unusual. Typically you see the OS listed as Ubuntu, the version 14.04, and the service pack as "PBIS Open 8.2.2979.2979.68390".
Member Of: Domain Computers (correct).
The computer is not trusted for delegation (correct).
Location is blank.
Managed By is blank.
Dial-In:
Control access through NPS Network Policy
No Callback
And that's it. Aside from the Operating System tab, everything looks the same as on a successfully-joined Linux box. Given that the join barfed on the client side, I can imagine the Machine account being incomplete.
Similar Messages
-
Windows 8.1 Pro Will Not Join Domain
Hello,
I know this a bit lengthy, but hopefully all the details will better help you guys understand my problem.
We just purchased an HP Pavilion Windows 8.1 laptop for our office along with the Windows 8.1 Pro Pack upgrade. When I went to install the pro upgrade, it accepted my key and started the upgrade process, but before the install completed, an error was generated
that stated "Something went wrong. " No error code was generated. I restarted the laptop, it did some updates, and when I logged back in, I checked under the computer properties and noticed that the OS version was changed to Windows 8.1 Pro with
Media Center, so I assumed that it installed. I checked for corrupted files in the command prompt and no corrupted files were found.
So, the next thing I tried to do was join the laptop to our domain. I have joined XPs, Vistas, and 7s with no problems, but for some reason, Windows 8.1 does not want to join the domain. Just to be clear, I have the laptop plugged in via ethernet and the
wifi off, I checked that the DNS of the laptop matched the DNS of the server, and all firewalls have been disabled. It seems to find the domain, but when it asks for the credentials to join the server, it returns an error stating that the domain could not
be contacted or information was entered incorrectly. I know I am entering the correct credentials because, just to test, I created a new user account on a different machine and used the credentials to join the server. I pinged the server from the laptop and
vice-versa, and all packets were received with no errors, so I know that they are "seeing" each other. Also, If I join the laptop to a Workgroup instead of the domain, I am able to access the server using the same credentials that it will not accept
when attempting to join the domain.
I am baffled. Any help or suggestions will be much appreciated. Thanks!I had exactly the same issue as above. When I rebooted my machine, it now shows that the upgrade to Pro Pack with media center is installed.
Haven't tried adding to a domain yet... will post an update when/if it fails. No reply means it joined fine after rebooting it from a failed attempt as above. I suspect that this had something to do with the fact that I had just logged
on to the machine and ran setup for the first time.
Reboot after setting up the computer for the first time, then proceed with the upgrade to 8.1 Pro Pack and I suspect that this issue won't occur. -
OSD Task Sequence - Will Not Join Domain
Good Afternoon!
I have had much experience with SCCM 2007, but am still getting used to SCCM 2012. Today, I set up and deployed my first test OSD deployment.
Everything worked fine except one little thing - the computer did not join to the domain.
Below is what I've tried to get this resolved...
- Verified credentials in TS were correctly entered
- Tested and was able to join the same computer TS was run on to the domain using the same credentials (including their formatting) which are in the TS.
- Checked the NetSetup.log in C:\Windows\Debug - It didn't exist. After joining the domain manually in the step above, it did, though.
- I didn't see anything that stood out in the smsts.log.
I'll be happy to attach any log files if needed. Any suggestions? THanks!
Ben K.Hi Torsten,
there is no netsetup.log. As stated earlier in this topic, I'm also convinced that the phase where it goes wrong has nothing to do with SCCM. It looks like the hardware installation phase is somehow skipped.
The difference between version v01 and v05 are feature installations and software installations. We are building a thick image. It has now grown to approx. 30 GB. Nothing's really special about the image. Except the large application installations.
We capture the image with a SCCM Capture task, which has always done his job right. :)
I'm now going to recapture the image. I hope this was just a small bug with the last capture. I use TSMBAutorun to capture to an image. Since I am at a customer now and this is my last day over here, I cannot guarantee to give feedback on the status
of the capture and imaging task. If possible, I will post the result in this topic.
If you found this post helpful, please “Vote as Helpful”.
If it answered your question, please “Mark as Answer”.
Christian Gude | www.itexperience.net -
I have purchased an iPad mini and it will not join my wifi network. Any ideas?
Some things to try first:
1. Turn Off your iPad. Then turn Off (disconnect power cord for 30 seconds or longer) the wireless router & then back On. Now boot your iPad. Hopefully it will see the WiFi.
2. Go to Settings>Wi-Fi and turn Off. Then while at Settings>Wi-Fi, turn back On and chose a Network.
3. Change the channel on your wireless router (Auto or Channel 6 is best). Instructions at http://macintoshhowto.com/advanced/how-to-get-a-good-range-on-your-wireless-netw ork.html
4. Go into your router security settings and change from WEP to WPA with AES.
5. Renew IP Address: (especially if you are droping internet connection)
• Launch Settings app
• Tap on Wi-Fi
• Tap on the blue arrow of the Wi-Fi network that you connect to from the list
• In the window that opens, tap on the Renew Lease button
~~~~~~~~~~~~~~~~~~~~~~~~~
iOS 6 Wifi Problems/Fixes
Fix For iOS 6 WiFi Problems?
http://tabletcrunch.com/2012/09/27/fix-ios-6-wifi-problems/
Did iOS 6 Screw Your Wi-Fi? Here’s How to Fix It
http://gizmodo.com/5944761/does-ios-6-have-a-wi+fi-bug
How To Fix Wi-Fi Connectivity Issue After Upgrading To iOS 6
http://www.iphonehacks.com/2012/09/fix-wi-fi-connectivity-issue-after-upgrading- to-ios-6.html
iOS 6 iPad 3 wi-fi "connection fix" for netgear router
http://www.youtube.com/watch?v=XsWS4ha-dn0
Apple's iOS 6 Wi-Fi problems
http://www.zdnet.com/apples-ios-6-wi-fi-problems-linger-on-7000004799/
~~~~~~~~~~~~~~~~~~~~~~~
Look at iOS Troubleshooting Wi-Fi networks and connections http://support.apple.com/kb/TS1398
iPad: Issues connecting to Wi-Fi networks http://support.apple.com/kb/ts3304
WiFi Connecting/Troubleshooting http://www.apple.com/support/ipad/wifi/
How to Fix: My iPad Won't Connect to WiFi
http://ipad.about.com/od/iPad_Troubleshooting/ss/How-To-Fix-My-Ipad-Wont-Connect -To-Wi-Fi.htm
iOS: Connecting to the Internet http://support.apple.com/kb/HT1695
iOS: Recommended settings for Wi-Fi routers and access points http://support.apple.com/kb/HT4199
How to Quickly Fix iPad 3 Wi-Fi Reception Problems
http://osxdaily.com/2012/03/21/fix-new-ipad-3-wi-fi-reception-problems/
iPad Wi-Fi Problems: Comprehensive List of Fixes
http://appletoolbox.com/2010/04/ipad-wi-fi-problems-comprehensive-list-of-fixes/
Fix iPad Wifi Connection and Signal Issues http://www.youtube.com/watch?v=uwWtIG5jUxE
Fix Slow WiFi Issue https://discussions.apple.com/thread/2398063?start=60&tstart=0
How To Fix iPhone, iPad, iPod Touch Wi-Fi Connectivity Issue http://tinyurl.com/7nvxbmz
Unable to Connect After iOS Update - saw this solution on another post.
https://discussions.apple.com/thread/4010130
Note - When troubleshooting wifi connection problems, don't hold your iPad by hand. There have been a few reports that holding the iPad by hand, seems to attenuate the wifi signal.
~~~~~~~~~~~~~~~
If any of the above solutions work, please post back what solved your problem. It will help others with the same problem.
Cheers, Tom -
Paths will not join with join tool
I'm trying to use the join tool on a pencil path but the paths will not join. I saw a similar question earlier, but no answer was given as it was user error. I'm new to Illustrator, and I don't quite get what he/she figured out he/she was doing. One answer was that the open path should not be more than 1 inch apart, and it's not (0.2). I "scrub" with the join tool, get the blue line, but when I release, the line disappears and nothing happens? At this point I can't even figure out what's going wrong so I can backtrack. Ideas anyone?
Please show a screenshot of the two lines.
-
I have windows xp sp3, run Mcaffee security software- when I open I-Tunes it does open however it will not connet to the I-Tunes store. I-Tunes diagnostic indicates that it does connect to the internet but the secure ling to I-Tunes fails. I-Tunes diagnostic attached. Hope some one can help. Microsoft Windows XP Professional Service Pack 3 (Build 2600) Dell Inc. MP061 iTunes 11.0.2.26 QuickTime 7.7.3 FairPlay 2.3.31 Apple Application Support 2.3.3 iPod Updater Library 10.0d2 CD Driver 2.2.3.0 CD Driver DLL 2.1.3.1 Apple Mobile Device 6.1.0.13 Apple Mobile Device Driver 1.64.0.0 Bonjour 3.0.0.10 (333.10) Gracenote SDK 1.9.6.502 Gracenote MusicID 1.9.6.115 Gracenote Submit 1.9.6.143 Gracenote DSP 1.9.6.45 iTunes Serial Number 0012B5500B576CC8 Current user is an administrator. The current local date and time is 2013-04-28 10:27:11. iTunes is not running in safe mode. WebKit accelerated compositing is enabled. HDCP is not supported. Core Media is supported. Video Display Information ATI Mobility Radeon X1400 **** External Plug-ins Information **** No external plug-ins installed. iPodService 11.0.2.26 is currently running. iTunesHelper 11.0.2.26 is currently running. Apple Mobile Device service 3.3.0.0 is currently running. **** Network Connectivity Tests **** Network Adapter Information Adapter Name: {7282B8D2-078A-4414-82D6-A506F9C935D0} Description: WiMAX Network Adapter - McAfee Core NDIS Intermediate Filter Miniport IP Address: 0.0.0.0 Subnet Mask: 0.0.0.0 Default Gateway: DHCP Enabled: Yes DHCP Server: 255.255.255.255 Lease Obtained: Wed Feb 13 12:30:29 2013 Lease Expires: Mon Jan 18 21:14:07 2038 DNS Servers: Adapter Name: {9CE46F79-8015-4C15-A074-B1ACA4388E56} Description: Sierra Wireless Network Adapter - McAfee Core NDIS Intermediate Filter Miniport IP Address: 0.0.0.0 Subnet Mask: 0.0.0.0 Default Gateway: DHCP Enabled: Yes DHCP Server: Lease Obtained: Mon Jan 18 21:14:07 2038 Lease Expires: Mon Jan 18 21:14:07 2038 DNS Servers: Adapter Name: {1A876FC9-50B6-4101-8E4F-838AF1D1CB32} Description: Dell Wireless 1390 WLAN Mini-Card - McAfee Core NDIS Intermediate Filter Miniport IP Address: 0.0.0.0 Subnet Mask: 0.0.0.0 Default Gateway: DHCP Enabled: Yes DHCP Server: Lease Obtained: Mon Jan 18 21:14:07 2038 Lease Expires: Mon Jan 18 21:14:07 2038 DNS Servers: Adapter Name: {E64A2DD8-7A18-4784-8DC0-08B143E504A7} Description: Broadcom 440x 10/100 Integrated Controller - McAfee Core NDIS Intermediate Filter Miniport IP Address: 0.0.0.0 Subnet Mask: 0.0.0.0 Default Gateway: DHCP Enabled: Yes DHCP Server: 10.0.40.20 Lease Obtained: Thu Aug 23 15:54:15 2012 Lease Expires: Thu Aug 23 17:54:15 2012 DNS Servers: Adapter Name: {2A9F97F5-D693-427F-BA40-9C3AA36937B1} Description: WAN (PPP/SLIP) Interface IP Address: 107.42.83.109 Subnet Mask: 255.255.255.255 Default Gateway: 107.42.83.109 DHCP Enabled: No DHCP Server: Lease Obtained: Wed Dec 31 18:00:00 1969 Lease Expires: Wed Dec 31 18:00:00 1969 DNS Servers: 66.1.77.7 68.29.73.7 Active Connection: Mobile Connected: Yes Online: Yes Using Modem: Yes Using LAN: No Using Proxy: No Firewall Information Windows Firewall is on. iTunes is enabled in Windows Firewall. Connection attempt to Apple web site was unsuccessful. The network connection timed out. Basic connection to the store failed. The network connection timed out. Connection attempt to Gracenote server was successful. The network connection timed out. Last successful iTunes Store access was 2013-04-16 10:14:47.
Hello cor-el, thanks for your reply. I changed my settings for downloads to desktop and it has appeared on there. When I double click I am asked which program I want to open file. I click firefox and another box "opening install" says I have chosen to open the file which is an application and do I want to save it. This is the only real option so I press save file. I get a box saying this is an executable file which may contain viruses - do you want to run. I press ok and the final box showing C drive file name and desktop appears stating application not found.
This happens the same whenever I try to install.
To my untrained eye the application is not being recognised as an application and I cannot work out how to get it to do that.
My plugin is still showing as out of date.
Is there anything you could suggest. Thanks for your time. -
Email not opening on my iPad2 This is a sudden thing, email had been working fine since purchasing the device then today would not stay open, now it will not open at all. After trying to open mail I receive a white screen for a nano second and the app closes.
Have you tried closing the Mail app completely ? From the home screen (i.e. not with Mail 'open' on-screen) double-click the home button to bring up the taskbar, then press and hold any of the apps on the taskbar for a couple of seconds or so until they start shaking, then press the '-' in the top left of the Mail app to close it, and touch any part of the screen above the taskbar so as to stop the shaking and close the taskbar.
If that doesn't work then you could try a reset : press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot. -
After I installed my iWork then when tried to open it it will not open what should i do?
After I installed my iWork then when tried to open it it will not open what should i do? Please help.
Make sure that you have a good speaker line with no kinks. Also, check with another device to amke sure it is not just your speakers.
-
After I installed my iWork then when tried to open it it will not open what should i do? Please help.
Does it successfully connect to other networks?
Do other devices successfully connect to this network?
Have you tried everything here?
iOS: Troubleshooting Wi-Fi networks and connections
Have you restored the iPod?
BTW, say that you "tried all troubleshooting instructions " with referencing what you tried provides us with little info as to what you did try. -
When I open iTunes, it will not allow me to preview or download TV shows. The preview and download options are gray and will not let me view them. I have tried installing the latest Quicktime but it tells me that I have to do software update and when I do, Quicktime does not appear to need an update. I have no idea what to do
Click on your preference and check the Parental tab for possible restrictions. Open iTunes, then click the iTunes menu, select preferences after the window opens click on the Parental icon, take a look at the content restrictions section.
-
I am not able to open the settings icon from my old iPAD. When I try to select the settings icon it looks like it's about to launch and open however; it will not stay open. I am trying to transfer all my data from my old iPAD to my new 4th gen iPAD.
Try a soft reset - press the home and power bottons and keep them pressed until the Apple logo comes on. Then see if you can access Settings.
-
MacBook will not join Airport network
I am flummoxed. My MacBook will not join my Airport Extreme network. It was fine this morning. I have restarted the MacBook. I have restarted the Airport base station. My iPhone is connecting to the network fine. My TV is connecting to the network fine. My G4 is connecting to the network fine. So, it appears there is some issue with the MacBook itself. Any ideas what could be the issue?
Dr. Kellie wrote:
I am flummoxed.
Are you a Nero Wolfe fan?
My MacBook will not join my Airport Extreme network. It was fine this morning. I have restarted the MacBook. I have restarted the Airport base station. My iPhone is connecting to the network fine. My TV is connecting to the network fine. My G4 is connecting to the network fine. So, it appears there is some issue with the MacBook itself. Any ideas what could be the issue?
First, either update your profile or your OS to 10.5.6. There have been many bug fixes since 10.5.2 and some WiFi updates require the latest Leopard version.
That being said, check your network preferences.
Do you have a rational IP Address?
If you are using an encrypted WiFi, you can temporarily turn off the encryption and see if the MB can join the network. If so, it's an encryption issue. If not, turn the encryption back on and we will have to look elsewhere.
BTW, you should be using WPA since WEP has long ago been compromised and is useless, but thats a side thing right now.
On the MB, I would run disk utility and repair permissions for starters. -
Our service just upgraded to 4g. Now my Mac computer will not join the network. It "sees" the network but will not "join"
Hi Hojo38,
That's not good! What happens when you attempt to make the connection? Do you receive an error message? What device is the computer making a connection to? Send details please.
Thanks,
PamelaF_VZW
Tweet us @vzwsupport -
When I have opened newstand it will not close like other apps. I have to shutdown the iPad completely why?
First, try a system reset. It cures many ills and it's quick, easy and harmless...
Hold down the on/off switch and the Home button simultaneously until you see the Apple logo. Ignore the "Slide to power off" text if it appears. You will not lose any apps, data, music, movies, settings, etc.
If the Reset doesn't work, try a Restore. Note that it's nowhere near as quick as a Reset. It could take well over an hour! Connect via cable to the computer that you use for sync. From iTunes, select the iPad/iPod and then select the Summary tab. Follow the on-screen directions for Restore and be sure to say "yes" to the backup. You will be warned that all data (apps, music, movies, etc.) will be erased but, as the Restore finishes, you will be asked if you wish the contents of the backup to be copied to the iPad/iPod. Again, say "yes."
At the end of the basic Restore, you will be asked if you wish to sync the iPad/iPod. As before, say "yes." Note that that sync selection will disappear and the Restore will end if you do not respond within a reasonable time. If that happens, only the apps that are part of the IOS will appear on your device. Corrective action is simple - choose manual "Sync" from the bottom right of iTunes.
If you're unable to do the Restore, go into Recovery Mode per the instructions here. Also, if you have IOS-7, read this. -
I have a partition on my IMac disk and Windows 7 loaded on one partition. I tried to open and W7 will not open and cannot repair itself. Is there a diagnostic/disk repair from Apple that I can try before reloading W7?
Csound1 What Ive been trying to explain is that I have been running bootcamp, I open the app where the first screen is the introduction, i hit continue, the first time I select "download the latest windows support software fromm Apple" then I return and instead select "Install Windows 7." Then hit continue. The third screen is where I "Create a Partition for Windows" I set Windows to 80 gigs then hit INSTALL. As stated before Bootcamp cannot find the install drivers saying "The installer disc could not be found." My windows software is on a USB drive not a disc, I tried using a virtual disc reader to make it appear that the windows software was running on a disc, still no luck. What I would like to know is how to install windows on bootcamp.
Maybe you are looking for
-
I have money in my itunes account but when I try to buy a song it doesn't let me buy it or download. It doesn't do anything!
-
How to open a text-file with notepad from labview-vi?
Hello, how can i execute a program from a vi? I want to open a textfile with Windows7-Notepad after selelecting it from a file-path-control and pressing an open-button. Thx for help Solved! Go to Solution.
-
IMac mid 2007 won't read internal dvd drive
I have a mid 2007 imac and it no longer recognizes the internal dvd drive when I insert a blank dvd to burn.
-
Hi we are using one db server. we are having few desktop applications for that. So we are needed to transfer some images to the server from our local mechines . Can you provide sample code to transfer file from local mechine to remote mechine. I thin
-
this box contains three squares, one contain a 1, the second the letter A and the third a down arrow. it appears and disappears quite quickly.