Linux 不能加入windows2003域

friendcft

1、服务器信息

AD: Windows 2003 server  
计算机名：iecas.sitong.com
域：sitong.com
IP:192.168.1.107

samba: RHEL5.4
hostnameracle
IP:192.168.1.106
DNS:192.168.1.107

2、krb5配置 (部分)

[libdefaults]
default_realm = SITONG.COM
dns_lookup_realm = false
dns_lookup_kdc = true
ticket_lifetime = 24h
forwardable = yes

[realms]
SITONG.COM = {
  kdc = 192.168.1.107:88
  admin_server = 192.168.1.107:749
  default_domain = SITONG.COM
}

[domain_realm]
.SITONG.COM = SITONG.COM
SITONG.COM = SITONG.COM

[appdefaults]
pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false
}

验证：
[root@oracle ~]# kinit Administrator@SITONG.COM
Password for Administrator@SITONG.COM:
3、samba配置(部分)
Samba配置
编辑修改/etc/samba/smb.conf如下：
[global]
workgroup = SITONG
realm = SITONG.COM
security = ADS
password server = 192.168.1.107
encrypt passwords = yes
winbind separator = +
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind use default domain = Yes[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No
配置好之后，使用testparm测试没有问题。
4、测试

[root@oracle ~]# net ads join -S 192.168.1.107 -U Administrator
Administrator's password:
The workgroup in /etc/samba/smb.conf does not match the short
domain name obtained from the server.
Using the name [SITONG] from the server.
You should set "workgroup = SITONG" in /etc/samba/smb.conf.
Using short domain name -- SITONG
Failed to set servicePrincipalNames. Please ensure that
the DNS domain of this server matches the AD domain,
Or rejoin with using Domain Admin credentials.
Deleted account for 'ORACLE' in realm 'SITONG.COM'
Failed to join domain: Type or value exists


我在windows 2003里面就没有这个oracle计算机，但是系统总是提示让我删除。


请高手帮我瞅瞅问题所在！！谢谢了

kns1024wh

回复 1# friendcft


    samba是什么版本的

cgweb

由于验证机制问题无法加入到windows 2003 AD中