1

I present the problem: On a PC with 32-bit Debian Jessie, using Samba 4.1.7 I have a Domain Controller, it has been running for 2 years but since 2 weeks ago it is giving me the following error: When I try to include a PC with Window7 or Windows8 (I have not tried XP or Win10) new to the domain it gives me the following error:

Error trying to join the domain. Only this operation is allowed on the main domain controller.]1

Traduction:

Error trying to join the domain.
Only this operation is allowed on the main domain controller.

I already check the logs and there is nothing out of the ordinary.

I already try with the samba tool:

samba-tool dbcheck

And I did not find any error in database.

Can someone help me or tell me where there is information about this error? Or help me with kerberos documentation?

  • Do you have a second (or backup) domain controller? – roaima Nov 15 '17 at 21:27
  • Nop, I just "inherit" the services. – k.Cyborg Nov 15 '17 at 21:58
  • I just realize, when I try: kinit admin@domain.name The answer is: "kinit: KDC reply did not match expectatios while getting initial credentials" – k.Cyborg Nov 15 '17 at 22:06
  • That should be kinit admin@DOMAIN.NAME (capital letters) – roaima Nov 15 '17 at 22:51
  • What do you mean that you "inherit" the services? Does whoever manages the domain controller have a second one? (This error is typical if the nominated DC is no longer the primary.) – roaima Nov 15 '17 at 22:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.