SOLVED Join to Active Directory manually

[aklyuk]

Hi.
I have FreeNAS 9.3.M4 Nightly builds. I have Samba4 as Domain Controller. Join to Active Directory from WebGUI is ok. But, i have (task | problem). I want to join FreeNAS to Active Directory manually.

If i start FreeNAS. In /var/log/message file i see line:

/usr/sbin/service ix-kerberos quietstart
/usr/sbin/service ix-nsswitch quietstart
/usr/sbin/service ix-kinit quietstart
/usr/sbin/service ix-kinit status

/usr/local/bin/python/usr/local/www/freenasUI/middleware/notifier.py start cifs
/usr/sbin/service ix-activedirectory quietstart
/usr/sbin/service ix-activedirectory status

/usr/local/bin/python/usr/local/www/freenasUI/middleware/notifier.py stop cifs
/usr/local/bin/python/usr/local/www/freenasUI/middleware/notifier.py start cifs
/usr/sbin/service ix-pam quietstart
/usr/sbin/service ix-cache quietstart &

Show : listing /var/log/messages

Oct 9 13:25:22 freenasm4 ActiveDirectory: /usr/sbin/service ix-kerberos quietstart
Oct 9 13:25:24 freenasm4 ActiveDirectory: /usr/sbin/service ix-nsswitch quietstart
Oct 9 13:25:26 freenasm4 ActiveDirectory: /usr/sbin/service ix-kinit quietstart
Oct 9 13:25:30 freenasm4 ActiveDirectory: /usr/sbin/service ix-kinit status
Oct 9 13:25:32 freenasm4 ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py start cifs
Oct 9 13:25:36 freenasm4 generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /sbin/sysctl -n 'kern.maxfilesperproc'
Oct 9 13:25:36 freenasm4 generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint,name
Oct 9 13:25:36 freenasm4 generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Oct 9 13:25:36 freenasm4 generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/pdbedit -d 0 -i smbpasswd:/tmp/tmp9m7kkc -s /usr/local/etc/smb4.conf -e tdbsam:/var/etc/private/passdb.tdb
Oct 9 13:25:36 freenasm4 generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/net groupmap list
Oct 9 13:25:37 freenasm4 notifier: Performing sanity check on Samba configuration: OK
Oct 9 13:25:37 freenasm4 notifier: Starting nmbd.
Oct 9 13:25:37 freenasm4 notifier: Starting smbd.
Oct 9 13:25:37 freenasm4 nmbd[5052]: [2014/10/09 13:25:37.264502, 0] ../lib/util/become_daemon.c:136(daemon_ready)
Oct 9 13:25:37 freenasm4 notifier: Starting winbindd.
Oct 9 13:25:37 freenasm4 smbd[5056]: [2014/10/09 13:25:37.464458, 0] ../lib/util/become_daemon.c:136(daemon_ready)
Oct 9 13:25:37 freenasm4 winbindd[5060]: [2014/10/09 13:25:37.481230, 0] ../source3/winbindd/winbindd_util.c:634(init_domain_list)
Oct 9 13:25:37 freenasm4 winbindd[5060]: Could not fetch our SID - did we join?
Oct 9 13:25:37 freenasm4 winbindd[5060]: [2014/10/09 13:25:37.481885, 0] ../source3/winbindd/winbindd.c:1240(winbindd_register_handlers)
Oct 9 13:25:37 freenasm4 winbindd[5060]: unable to initialize domain list
Oct 9 13:25:37 freenasm4 ActiveDirectory: /usr/sbin/service ix-activedirectory quietstart
Oct 9 13:25:41 freenasm4 ActiveDirectory: /usr/sbin/service ix-activedirectory status
Oct 9 13:25:50 freenasm4 ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py stop cifs
Oct 9 13:25:51 freenasm4 notifier: winbindd not running? (check /var/run/samba/winbindd.pid).
Oct 9 13:25:51 freenasm4 notifier: Stopping smbd.
Oct 9 13:25:51 freenasm4 notifier: Waiting for PIDS: 5056.
Oct 9 13:25:51 freenasm4 notifier: Stopping nmbd.
Oct 9 13:25:51 freenasm4 nmbd[5052]: STATUS=daemon 'nmbd' finished starting up and ready to serve connectionsGot SIGTERM: going down...
Oct 9 13:25:51 freenasm4 notifier: Waiting for PIDS: 5052.
Oct 9 13:25:51 freenasm4 ActiveDirectory: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py start cifs
Oct 9 13:25:54 freenasm4 generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /sbin/sysctl -n 'kern.maxfilesperproc'
Oct 9 13:25:54 freenasm4 generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint,name
Oct 9 13:25:54 freenasm4 generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: zfs list -H -o mountpoint
Oct 9 13:25:54 freenasm4 generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/pdbedit -d 0 -i smbpasswd:/tmp/tmp2XiAVC -s /usr/local/etc/smb4.conf -e tdbsam:/var/etc/private/passdb.tdb
Oct 9 13:25:54 freenasm4 generate_smb4_conf.py: [common.pipesubr:58] Popen()ing: /usr/local/bin/net groupmap list
Oct 9 13:25:55 freenasm4 notifier: Performing sanity check on Samba configuration: OK
Oct 9 13:25:55 freenasm4 notifier: Starting nmbd.
Oct 9 13:25:55 freenasm4 notifier: Starting smbd.
Oct 9 13:25:55 freenasm4 nmbd[6028]: [2014/10/09 13:25:55.233321, 0] ../lib/util/become_daemon.c:136(daemon_ready)
Oct 9 13:25:55 freenasm4 notifier: Starting winbindd.
Oct 9 13:25:55 freenasm4 smbd[6032]: [2014/10/09 13:25:55.272930, 0] ../lib/util/become_daemon.c:136(daemon_ready)
Oct 9 13:25:55 freenasm4 winbindd[6038]: [2014/10/09 13:25:55.314214, 0] ../lib/util/become_daemon.c:136(daemon_ready)
Oct 9 13:25:55 freenasm4 ActiveDirectory: /usr/sbin/service ix-pam quietstart
Oct 9 13:25:57 freenasm4 ActiveDirectory: /usr/sbin/service ix-cache quietstart &

I do this command manually. Samba4 is enable.
But:
/usr/sbin/service ix-kerberos quietstart
/usr/sbin/service ix-kerberos status

I received follow:
"ix-kerberos is not running"

/usr/sbin/service ix-kinit quietstart
/usr/sbin/service ix-kinit status
echo $?
"1"
klist
"klist: No ticket file: /tmp/krb5cc_0"

Why???

Help me, please

 

[L]

I would check to make sure time is the same on both systems.

 

[anodos]

Yeah, set your NTP server to be your DC. You also need to make sure that DNS is set to your DC as well.

 

[aklyuk]

ok. I checked the time on both systems. The difference is 2 minutes.
If i do join to AD from WebGUI, join is ok.

What can i do more?

 

[aklyuk]

I found the file /etc/directoryservices/ActiveDirectory/ctl
Hi is script and hi does join to domain from command line.
Also, i used keytab file.