[OpenIndiana-discuss] Samba4 join, almost there!

[Michael Farnbach]

Hello, I hope y'all can help. I've been working on this for a while and
feel like I'm almost there...

I'm trying to join an active directory, I've read up on all of the usual
pitfalls and I've avoided them (I think) and have something that I can't
find any more help on.

When I try to join the domain I get...

# smbadm join -u "HOME\administrator+password"
After joining HOME the smb service will be restarted automatically.
Would you like to continue? [no]: yes
Joining HOME ... this may take a minute ...
failed to join HOME: UNSUCCESSFUL
Please refer to the system log for more information.

Dmesg output shows...

Mar  7 20:55:59 indi smbd[11053]: [ID 232655 daemon.notice] ldap_modify:
DSA is unwilling to perform
Mar  7 20:55:59 indi smbd[11053]: [ID 702911 daemon.notice] Failed to
modify the workstation trust account.
Mar  7 20:55:59 indi smbd[11053]: [ID 871254 daemon.error] smbd: failed
joining HOME (UNSUCCESSFUL)

I have already joined the domain with kclient successfully, but now I need
cifs to be able to authenticate against the domain.

I seem to have to set lm_auth_level to >3 or <5, or I get this error...

# sharectl set -p lmauth_level=2 smb
# smbadm join -u "HOME\administrator+password"
After joining HOME the smb service will be restarted automatically.
Would you like to continue? [no]: yes
Joining HOME ... this may take a minute ...
failed to join HOME: LOGON_FAILURE
Please refer to the system log for more information.

And in dmesg...

Mar  7 21:02:12 indi smbd[11053]: [ID 807464 daemon.error] ndr_rpc_bind:
smbrdr_ctx_new(S=ACTIVED, D=HOME, U=administrator), err=48
Mar  7 21:02:12 indi smbd[11053]: [ID 871254 daemon.error] smbd: failed
joining HOME (LOGON_FAILURE)

Samba4 logs hits that an empty set of username, domain and password is sent
when "DSA is unwilling to perform", but I'm not sure if that hints at an
error or not.

Any help would be appreciated, I should mention that my linux and windows 7
boxes have joined as well as the kclient with the open indiana box.

thanks!