[cifs-discuss] join domain fails with INVALID_PARAMETER

[Chris Rijk]

Probably a noddy problem (since this is outside my area of expertise and this is more of a kick-the-tires attempt to see what can get before finalising what we'll be doing long term).

-bash-3.2# uname -a
SunOS hippo 5.11 snv_86 i86pc i386 i86pc

I have a brand new install of OpenSolaris 2008.05 - apart from networking setup, done nothing else. Basically an exact copy of the setup steps from the blog below, apart from the server names:
http://blogs.sun.com/timthomas/entry/configuring_the_opensolaris_cifs_server

Only extra packages installed are SUNWsmbs and SUNWsmbskr.

Everything works fine until I actually try to join:
-bash-3.2# smbadm join -u Administrator mars.mydomain.local
Enter domain password:
Joining 'mars.mydomain.local' ... this may take a minute ...
failed to join domain 'mars.mydomain.local' (INVALID_PARAMETER)

I've tried lots of variants on the above too.

-bash-3.2# more /etc/resolv.conf
domain mydomain.local
nameserver 192.168.92.25
search mydomain.local

Where .25 is the IP address of "mars".

This is what I see in /var/adm/messages:
May 27 14:42:53 hippo idmap[337]: [ID 153168 daemon.notice] Couldn't open and SASL bind LDAP connections to any domain controllers; discovery of some items will fail
May 27 14:42:53 hippo last message repeated 3 times
May 27 14:44:49 hippo smbd[385]: [ID 970359 daemon.error] smbd: fully-qualified domain name is unknown

The "domain name is unknown" line is the only one that appears when I try to join, but I thought the previous messages might be relevant.

I can do stuff like ntpdate mars.mydomain.local, and that works fine.

Should the krb5kdc service be running? (The smb/server one is, but doesn't depend on krb5kdc). I've tried getting it to run manually, but wasn't able to - I've tried looking around and haven't found anyone else having a similar problem (I think) so figured either I'm making a basic mistake or have a serious problem.

The /etc/krb5/krb5.conf file looks like this:
[libdefaults]
   default_realm = MYDOMAIN.LOCAL

[realms]
   MYDOMAIN.LOCAL = {
       kdc = mars.mydomain.local
       admin_server = mars.mydomain.local
       kpasswd_server = mars.mydomain.local
       kpasswd_protocol = SET_CHANGE
   }

[domain_realm]
   .mydomain.local = MYDOMAIN.LOCAL
--
This messages posted from opensolaris.org