I am so confused as to how others were able to get this to work. I get the same results after changing my domain to test.lan.
firewall@firewall:/etc$ host -t SRV _ldap._tcp.test.lan
_ldap._tcp.test.lan has SRV record 0 100 389 DC.test.lan.
firewall@firewall:/etc$ host -t SRV _kerberos._udp.test.lan
_kerberos._udp.test.lan has SRV record 0 100 88 DC.test.lan.
firewall@firewall:/etc$ host -t A dc.test.lan
dc.test.lan has address 10.1.1.8
firewall@firewall:/etc$ samba-tool domain join test.lan DC -Uadministrator --realm=test.lan
Finding a writeable DC for domain 'test.lan'
ERROR(exception): uncaught exception - Failed to find a writeable DC for domain 'test.lan'
File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 160, in _run
return self.run(*args, **kwargs)
File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line 256, in run
machinepass=machinepass, use_ntvfs=use_ntvfs, dns_backend=dns_backend)
File "/usr/lib/python2.7/dist-packages/samba/join.py", line 1057, in join_DC
machinepass, use_ntvfs, dns_backend, promote_existing)
File "/usr/lib/python2.7/dist-packages/samba/join.py", line 77, in __init__
ctx.server = ctx.find_dc(domain)
File "/usr/lib/python2.7/dist-packages/samba/join.py", line 234, in find_dc
raise Exception("Failed to find a writeable DC for domain '%s'" % domain)
After I install the Users module and setting the ldap settings to be dc=test,dc=lan and saving it displays correctly on the admin screen.
Here is what the LDAP web settings shows:
LDAP information
Base DN: dc=test,dc=lan
Root DN: cn=zentyal,dc=test,dc=lan
Password: 5=zNP8aySWc=e3eYkf1i
Users DN: ou=Users,dc=test,dc=lan
Groups DN: ou=Groups,dc=test,dc=lan
But I still cannot change the realm in the File Sharing from ZENTYAL-DOMAIN.LAN to my TEST.LAN
I noticed after installing the Users module, configuring it and saving the /etc/krb5.conf still showed this:
[libdefaults]
default_realm = ZENTYAL-DOMAIN.LAN
dns_lookup_kdc = true
dns_lookup_realm = true
default_tgs_enctypes = arcfour-hmac-md5 des-cbc-md5 dec-cbc-crc
default_tkt_enctypes = arcfour-hmac-md5 des-cbc-md5 dec-cbc-crc
preferred_enctypes = arcfour-hmac-md5 des-cbc-md5 dec-cbc-crc
[kadmin]
default_keys = des-cbc-crc:pw-salt des-cbc-md5:pw-salt arcfour-hmac-md5:pw-salt
Why would it configure ZENTYAL-DOMAIN.LAN to be the default realm when I just configured it to be TEST.LAN?
This is beginning to be very frustrating!