Join 2008 R2 Domain Issue

Support
, ,
1

NethServer Version: 7 RC3

Hi,

Having an issue with joining NS to domain, I see the server in MS AD but not able to see any user, I am seeing the following in the message logs;

Jan 27 15:08:42 ACTPROXY01 httpd: [ERROR] NethServer\Tool\UserProvider: Account provider connection reset by peer: check if the server supports SSL/TLS connections
Jan 27 15:08:42 ACTPROXY01 httpd: [ERROR] Connection reset by peer
Jan 27 15:09:07 ACTPROXY01 sshd[3657]: Did not receive identification string from 10.1.110.5

Also seeing this (AccountProvider_Error_255) under account provider in GUI.

Any help is appeciated appreciated, Thank you

2 Likes
2

Could you paste here the contents of page

 Status > Domain accounts

Also the output of this shell command could help:

 account-provider-test dump

See also this topic

3

Status > Domain accounts

NetBIOS domain name: CORPORATE
LDAP server: 10.1.10.2
LDAP server name: ACTSRVDC02.corporate.com
Realm: CORPORATE.COM
Bind Path: dc=CORPORATE,dc=COM
LDAP port: 389
Server time: Fri, 27 Jan 2017 16:38:39 EST
KDC server: 10.1.10.2
Server time offset: -31
Last machine account password change: Fri, 27 Jan 2017 14:21:11 EST

Join is OK
whenCreated: 20170127192040.0Z
whenChanged: 20170127192040.0Z
name: ACTPROXY01
lastLogon: 131300267195629184
pwdLastSet: 131300184406481246
objectSid: S-1-5-21-776561741-527237240-682003330-6608
accountExpires: 9223372036854775807
sAMAccountName: ACTPROXY01$
dNSHostName: actproxy01.corporate.com
servicePrincipalName: HOST/actproxy01.corporate.com
servicePrincipalName: HOST/ACTPROXY01

sell command account-provider-test dump

{
“startTls” : “”,
“bindUser” : “administrator”,
“userDN” : “dc=corporate,dc=com”,
“port” : 636,
“isAD” : “1”,
“host” : “corporate.com”,
“groupDN” : “dc=corporate,dc=com”,
“isLdap” : “”,
“ldapURI” : “ldaps://corporate.com”,
“baseDN” : “dc=corporate,dc=com”,
“bindPassword” : “ijJsPJVmmoce”,
“bindDN” : “CORPORATE\administrator”
}

4

Does your AD server have a SSL certificate?

1 Like
5

no it does not

6

You should configure one, or use clear text connections (security danger): change ldaps:// to ldap:// under “Accounts provider > advanced settings”.

Read also

http://docs.nethserver.org/en/v7rc/accounts.html#join-an-existing-active-directory-domain

2 Likes
7

Thank you, have NS connected to my AD know… and can see my users.

1 Like