Hello
I'm trying to find the best way to join my OmniOS server to my AD domain network
I came across this Oracle page and I was wondering if anything similar exists for OmniOS r151030, etc.?
Overview of the nss_ad Naming Service Module - Oracle Solaris Administration: Naming and Directory Services
Thank you
Avery
Edit: I thought I would flesh out my post with where I'm at in the process right now:
I try to enable kclient, but this is what I get:
My /etc/nsswitch.conf:
And my /etc/krb5/krb5.conf:
Current SMB properties: sharectl get smb:
Any ideas?
I'm trying to find the best way to join my OmniOS server to my AD domain network
I came across this Oracle page and I was wondering if anything similar exists for OmniOS r151030, etc.?
Overview of the nss_ad Naming Service Module - Oracle Solaris Administration: Naming and Directory Services
Thank you
Avery
Edit: I thought I would flesh out my post with where I'm at in the process right now:
I try to enable kclient, but this is what I get:
Code:
root@napp-it01:/usr/lib/ldap# kclient -T ms_ad
Starting client setup
---------------------------------------------------
Setting up /etc/krb5/krb5.conf.
Attempting to join 'NAPP-IT01' to the 'DOMAIN.COM' domain.
Password for Administrator@DOMAIN.COM:
Forest name found: domain.com
Site name not found. Local DCs/GCs will not be discovered.
Creating the machine account in AD via LDAP.
Failed to create the AD object via LDAP.
---------------------------------------------------
Setup FAILED.
Code:
passwd: files ldap
group: files ldap
# consult /etc "files" only if ldap is down.
hosts: files [SUCCESS=return] dns
# Note that IPv4 addresses are searched for in all of the ipnodes databases
# before searching the hosts databases.
ipnodes: files [SUCCESS=return] dns
networks: files
protocols: files
rpc: files
ethers: files
netmasks: files
bootparams: files
publickey: files
netgroup: files
automount: files ldap
aliases: files
# for efficient getservbyname() avoid ldap
services: files
printers: user files
auth_attr: files
prof_attr: files
project: files
tnrhtp: files
tnrhdb: files
Code:
[libdefaults]
default_realm = DOMAIN.COM
dns_lookup_kdc = true
verify_ap_req_nofail = false
[realms]
DOMAIN.COM = {
kdc = 2012dc01.domain.com
kdc = 2012dc02.domain.com
admin_server = 2012dc01.domain.com
kpasswd_server = 2012dc01.domain.com
}
[domain_realm]
.domain.com = DOMAIN.COM
[logging]
default = FILE:/var/krb5/kdc.log
kdc = FILE:/var/krb5/kdc.log
kdc_rotate = {
# How often to rotate kdc.log. Logs will get rotated no more
# often than the period, and less often if the KDC is not used
# frequently.
period = 1d
# how many versions of kdc.log to keep around (kdc.log.0, kdc.log.1, ...)
versions = 10
}
[appdefaults]
kinit = {
renewable = true
forwardable= true
}
Code:
system_comment=
max_workers=1024
netbios_enable=true
netbios_scope=
lmauth_level=4
keep_alive=5400
wins_server_1=
wins_server_2=
wins_exclude=
signing_enabled=true
signing_required=false
restrict_anonymous=false
pdc=
ads_site=192.168.1.2
ddns_enable=true
autohome_map=/etc
ipv6_enable=false
print_enable=false
traverse_mounts=true
map=
unmap=
disposition=
max_protocol=
Last edited:
