help with samba DC

Red Squirrel

No Lifer
May 24, 2003
70,166
13,572
126
www.anyf.ca
I noticed that its been, probably years, that my machine is no longer actually part of my domain. The trust account probably expired, and I'm guessing with a samba domain, it has to be readded manually to refresh it. So I removed the PC from the domain, but now I can't readd it. I get this error:

a domain controller for the domain galaxy could not be contacted. [...]

Then more info:

Note: This information is intended for a network administrator. If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\WINDOWS\debug\dcdiag.txt.

The domain name galaxy might be a NetBIOS domain name. If this is the case, verify that the domain name is properly registered with WINS.

If you are certain that the name is not a NetBIOS domain name, then the following information can help you troubleshoot your DNS configuration.

The following error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain galaxy:

The error was: "DNS name does not exist."
(error code 0x0000232B RCODE_NAME_ERROR)

The query was for the SRV record for _ldap._tcp.dc._msdcs.galaxy

Common causes of this error include the following:

- The DNS SRV record is not registered in DNS.

- One or more of the following zones do not include delegation to its child zone:

galaxy
. (the root zone)

For information about correcting this problem, click Help.


I have a feeling its a DNS issue as I did do some DNS changes a while back. So how would I go about fixing this? Tried putting galaxy, as well as galaxy.loc (which resolves to the DCs ip through DNS) no luck.




This is dxdiag.txt



The domain name galaxy might be a NetBIOS domain name. If this is the case, verify that the domain name is properly registered with WINS.

If you are certain that the name is not a NetBIOS domain name, then the following information can help you troubleshoot your DNS configuration.

The following error occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain galaxy:

The error was: "DNS name does not exist."
(error code 0x0000232B RCODE_NAME_ERROR)

The query was for the SRV record for _ldap._tcp.dc._msdcs.galaxy

Common causes of this error include the following:

- The DNS SRV record is not registered in DNS.

- One or more of the following zones do not include delegation to its child zone:

galaxy
. (the root zone)

For information about correcting this problem, click Help.




OS is Fedora Core 5







edit: more info:


I have TONS of these in my event logs. I really wish I had not pulled the PC off the domain... now I'm stuck rebuilding my profile until I fix this problem ACK.

Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 15
Date: 11/19/2007
Time: 6:16:34 PM
User: N/A
Computer: DESTROYER
Description:
Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does not exist or could not be contacted.
Enrollment will not be performed.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
 

Red Squirrel

No Lifer
May 24, 2003
70,166
13,572
126
www.anyf.ca
Fixed it. Not the way I was hoping though. Reimaged my machine, removed from domain, then it let me readd it. But now I just realized I forgot to pick partition size when restoring so now I have to reimage again so I can pick the size. (I have no partition program that detects sata drives). what a pain.....
 

rasczak

Lifer
Jan 29, 2005
10,437
23
81
was it pretty hard to get your linux installation to be authenticated against a windows DC?

also when I have issues with systems not being able to contact the DC, i usually made sure the dns ip is set in the local connections settings at least once. go to CLI, flush and registerdns, as well do NBTSTAT -RR command. once the machine was able to contact the DC, i deleted the DNS entry. but this is in windows.

I don't know if there's an equivalent in linux for the said fix? I usually find it much easier to flush the dns cache and reregister it.
 

Red Squirrel

No Lifer
May 24, 2003
70,166
13,572
126
www.anyf.ca
Actually I was putting a windows box on Linux DC.

I'm still getting these errors in my event logs though:

Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 15
Date: 2/15/2008
Time: 12:44:54 PM
User: N/A
Computer: DESTROYER
Description:
Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does not exist or could not be contacted.
Enrollment will not be performed.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.