Hi,
I installed the newest iso at a virtual box and tried to join the domain of the production nethserver with ad at the Account Provider page. I get the following error:
Failed to join Active Directory (Discovery timed out after 15 seconds)
May 16 14:24:36 TestServer esmith::event[19033]: [INFO] service dnsmasq restart
May 16 14:24:36 TestServer systemd: Stopping DNS caching server....
May 16 14:24:36 TestServer dnsmasq[18972]: exiting on receipt of SIGTERM
May 16 14:24:36 TestServer systemd: Started DNS caching server..
May 16 14:24:36 TestServer systemd: Starting DNS caching server....
May 16 14:24:36 TestServer dnsmasq[19058]: started, version 2.76 cachesize 4000
May 16 14:24:36 TestServer dnsmasq[19058]: compile time options: IPv6 GNU-getopt DBus no-i18n IDN DHCP DHCPv6 no-Lua TFTP no-conntrack ipset auth no-DNSSEC loop-detect inotify
May 16 14:24:36 TestServer dnsmasq-tftp[19058]: TFTP root is /var/lib/tftpboot
May 16 14:24:36 TestServer dnsmasq[19058]: using nameserver 192.168.46.5#53
May 16 14:24:36 TestServer dnsmasq[19058]: using nameserver 8.8.8.8#53
May 16 14:24:36 TestServer dnsmasq[19058]: read /etc/hosts - 2 addresses
May 16 14:24:36 TestServer esmith::event[19033]: Action: /etc/e-smith/events/actions/adjust-services SUCCESS [0.169002]
May 16 14:24:36 TestServer esmith::event[19033]: Event: nethserver-dnsmasq-save SUCCESS
May 16 14:24:36 TestServer httpd: [ERROR] Exit code from realm join operation is 1
25/tcp open smtp
53/tcp open domain
80/tcp open http
110/tcp open pop3
143/tcp open imap
443/tcp open https
465/tcp open smtps
587/tcp open submission
993/tcp open imaps
995/tcp open pop3s
3128/tcp open squid-http
You are right, know I tried with IP from samba container:
Starting Nmap 6.40 ( http://nmap.org ) at 2018-05-17 08:47 CEST
Nmap scan report for 192.168.46.6
Host is up (0.00096s latency).
All 1000 scanned ports on 192.168.46.6 are filtered
MAC Address: B2:C1:65:74:D9:AC (Unknown)
Nmap done: 1 IP address (1 host up) scanned in 27.42 seconds
Errors are shown, at the moment I try to bind to an nethserver ad.
I can ping the ad server by FQDN and by server IP, but not by samba IP
Sorry but I didn’t understand correctly. You said “tried to join the domain of the production nethserver”, so I assumed you want to configure a remote account provider. But when I read “Tried with IP from samba container” I started to think it is a local account provider…
My Nethserver ad is installed as VM at a KVM (Qemu) at an ubuntu host at the moment. The server IP of NethServer (AD) is 192.168.46.5 and the container IP is 192.168.46.6. It is a nethserver 7.4 final.
Now I tried for testing to install a 7.5 alpha at a virtual box (at a windows client) and tried to join to the ad domain with it.
The commands I executed at the ad server. Is this right?
Can you explain me what you mean please? The bind is not working at the remote ad, so I can’t unbind it, or do you think something is bind without showing me.
Nmap scan report for 192.168.46.6
Host is up (0.000036s latency).
Not shown: 987 closed ports
PORT STATE SERVICE
53/tcp open domain
88/tcp open kerberos-sec
135/tcp open msrpc
139/tcp open netbios-ssn
389/tcp open ldap
445/tcp open microsoft-ds
464/tcp open kpasswd5
636/tcp open ldapssl
3268/tcp open globalcatLDAP
3269/tcp open globalcatLDAPssl
49152/tcp open unknown
49153/tcp open unknown
49154/tcp open unknown
But from other server or windows client it does not work.
I’ve looked at the settings at the host, how I said, the bridge is bridged to a real netwkoradapter and not to another bridge like suggested at the documentation. Could this be a problem? For information the host has 4 networkadapters, one for binding the host to network and respectively one for every virtual machine.
I tried it with inactive firewall (ufw - ubuntu firewall) at the host, this doesn’t work also.
Tried nmap from host to nethserver, all ports are filtered too. So I think the problem is nethserver or the KVM like you said, but I don’t know what to check anymore.
sorry, it was
At least we are sure it works correctly!