Chinaunix

标题: CENTOS 5.7 samba通过AD验证的问题 [打印本页]

作者: tonyyuen 时间: 2014-04-24 09:06
标题: CENTOS 5.7 samba通过AD验证的问题
最近在测试samba 通过windows 2008R2 的AD进行身份验证，但在加入域出现台下提示，好像是说Centos的机器名：FILECENTOS已经存在于域PRECI.COM中了，但我的域也是新建的，samba也是新装的，之前从来没加过域，并且我也试过在samba中更改过netbios name 也是同样的进示，这是什么原因呢，麻烦大家帮忙分析分析谢谢！

[root@fileserver etc]# net ads join -U administrator@PRECI.COM
administrator@PRECI.COM's password:
Using short domain name -- PRECI
Failed to set servicePrincipalNames. Please ensure that
the DNS domain of this server matches the AD domain,
Or rejoin with using Domain Admin credentials.
Deleted account for 'FILECENTOS' in realm 'PRECI.COM'
Failed to join domain: Type or value exists

samba 配置文件如下：
workgroup = PRECI
      server string = Samba
      netbios name = filecentos
      password server = 192.168.1.2
      realm = PRECI.COM
      security = ADS
      idmap uid = 16777216-33554431
      idmap gid = 16777216-33554431
      template shell = /sbin/nologin
      template homedir = /home/%U
      winbind use default domain = yes
      winbind offline logon = yes
      winbind enum groups = yes
      winbind enum users = yes
      winbind separator = /

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)