проксик стоит в dmz. к кд имеет доступ через nat.
в hosts прописал ip контролера домена, дабы не использовать IP в конфигах.
сразу столкнулся с проблемой - не могу получить билет кербероса. решил добавлением в [libdefaults] опции no-addresses = yes (пришлось рисовать конфиг krb5.conf). теперь билет получил.
ввожу самбу в домен:
Код: Выделить всё
[17:06] /home/m0ps #net join -U m0ps
Enter m0ps's password:
Failed to join domain: failed to find DC for domain DOMAIN.LOCAL
ADS join did not work, falling back to RPC...
Unable to find a suitable server for domain DOMAIN
Unable to find a suitable server for domain DOMAIN
Код: Выделить всё
[17:18] /home/m0ps #net ads lookup
Information for Domain Controller: 10.10.110.103
Response Type: LOGON_SAM_LOGON_RESPONSE_EX
GUID: 94fd37ff-fc91-442d-8396-33b59abaa661
Flags:
Is a PDC: yes
Is a GC of the forest: yes
Is an LDAP server: yes
Supports DS: yes
Is running a KDC: yes
Is running time services: yes
Is the closest DC: yes
Is writable: yes
Has a hardware clock: yes
Is a non-domain NC serviced by LDAP server: no
Is NT6 DC that has some secrets: no
Is NT6 DC that has all secrets: no
Forest: domain.local
Domain: domain.local
Domain Controller: DC.domain.local
Pre-Win2k Domain: DOMAIN
Pre-Win2k Hostname: DC
Server Site Name : Default-First-Site
Client Site Name : Default-First-Site
NT Version: 5
LMNT Token: ffff
LM20 Token: ffff