Project

General

Profile

Bug #23885

Version 11 AD Join

Added by Thomas Lindell over 3 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
No priority
Assignee:
John Hixson
Category:
OS
Target version:
Seen in:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
Yes
Needs Doc:
Yes
Needs Merging:
Yes
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

Unable to join AD

Freenas 9.10 is working fine however on 11.0 i am unable to get it to join AD

Associated revisions

Revision e700bd76 (diff)
Added by John Hixson over 3 years ago

Set timeout values for AD & LDAP calls based on sysctl Ticket: #23885

Revision 5e0ece25 (diff)
Added by John Hixson over 3 years ago

Set timeout value for AD using sysctl Ticket: #23885

Revision 4cedcc49 (diff)
Added by John Hixson over 3 years ago

Set timeout values for AD & LDAP calls based on sysctl Ticket: #23885 (cherry picked from commit e700bd76b42ed321900c26489eee559011a17e53)

Revision 5c07ee57 (diff)
Added by John Hixson over 3 years ago

Set timeout value for AD using sysctl Ticket: #23885 (cherry picked from commit 5e0ece259fa30cc23172d01e1855aff26f8a037e)

History

#1 Updated by Thomas Lindell over 3 years ago

  • File debug-FNAS-SAN-20170510005832.tgz added

#2 Updated by John Hixson over 3 years ago

  • Status changed from Unscreened to Screened
  • Target version set to 11.1

#3 Updated by John Hixson over 3 years ago

  • Status changed from Screened to 15

Can you delete the freenas object from our computers OU in your AD, and then run this from the command line: sh /etc/directoryservice/ActiveDirectory/ctl start and paste output here?

#4 Updated by Thomas Lindell over 3 years ago

Absolutely. Here is the output. I have to say i thought being up until 2:30 and submitting this then I'd be waiting at least a week for someone to look at it Thanks for being so fast.

! Command Output !
root@FNAS-SAN:~ # sh /etc/directoryservice/ActiveDirectory/ctl start
False
Traceback (most recent call last):
File "/usr/local/libexec/nas/generate_krb5_conf.py", line 538, in <module>
main()
File "/usr/local/libexec/nas/generate_krb5_conf.py", line 469, in main
ad = Struct(client.call('notifier.directoryservice', 'AD'))
File "/usr/local/lib/python3.6/site-packages/middlewared/client/client.py", line 204, in call
raise CallTimeout("Call timeout")
middlewared.client.client.CallTimeout: Call timeout
Call timeout
Traceback (most recent call last):
File "/usr/local/libexec/nas/generate_ldap_conf.py", line 90, in <module>
main()
File "/usr/local/libexec/nas/generate_ldap_conf.py", line 87, in main
ldap_conf_activedirectory(client, ldap_conf)
File "/usr/local/libexec/nas/generate_ldap_conf.py", line 35, in ldap_conf_activedirectory
ad = Struct(client.call('notifier.directoryservice', 'AD'))
File "/usr/local/lib/python3.6/site-packages/middlewared/client/client.py", line 204, in call
raise CallTimeout("Call timeout")
middlewared.client.client.CallTimeout: Call timeout
realm must be set in in /usr/local/etc/smb4.conf for ADS join to succeed.
Invalid configuration. Exiting....
Failed to join domain: The parameter is incorrect.
False
winbindd not running? (check /var/run/samba/winbindd.pid).
smbd not running? (check /var/run/samba/smbd.pid).
nmbd not running? (check /var/run/samba/nmbd.pid).
True

#5 Updated by John Hixson over 3 years ago

ugh. This looks like another call timeout error. In fact, I see several. I'll have a fix for this today and can help you patch your system afterwards.

#6 Updated by Thomas Lindell over 3 years ago

Just Checking in to see if you had any luck with a fix

#7 Updated by John Hixson over 3 years ago

Thomas Lindell wrote:

Just Checking in to see if you had any luck with a fix

I've committed code to address the timeouts, yes. Are you running nightlies? If so, can you test out the latest and see if things work better?

#8 Updated by John Hixson over 3 years ago

  • Target version changed from 11.1 to 11.0-RC3

#9 Updated by John Hixson over 3 years ago

  • Status changed from 15 to Needs Developer Review
  • Assignee changed from John Hixson to Vaibhav Chauhan

#10 Updated by Thomas Lindell over 3 years ago

Yep that fixed it

#11 Updated by Vaibhav Chauhan over 3 years ago

  • Assignee changed from Vaibhav Chauhan to Chris Torek

can you please review ?

#12 Updated by William Grzybowski over 3 years ago

  • Status changed from Needs Developer Review to Reviewed
  • Assignee changed from Chris Torek to John Hixson

#13 Updated by Vaibhav Chauhan over 3 years ago

  • Status changed from Reviewed to Merged

#14 Updated by Vaibhav Chauhan over 3 years ago

  • Status changed from Merged to Resolved

#15 Updated by Dru Lavigne almost 3 years ago

  • File deleted (fnasbug-report-output.txt)

#16 Updated by Dru Lavigne almost 3 years ago

  • File deleted (freenas-debug)

#17 Updated by Dru Lavigne almost 3 years ago

  • File deleted (debug-FNAS-SAN-20170510005832.tgz)

Also available in: Atom PDF