?
Solved

Joining Zentyal Community Server to Windows Server 2008 domain.

Posted on 2015-01-22
10
Medium Priority
?
538 Views
Last Modified: 2015-06-09
I am trying to install a Zentyal Community Edition server to act as an RODC for my network. It's basically a backup DNS Server/DC in case one of our virtual hosts goes down. Every time I try to join the Zentyal server as an additional DC using the web console, I get a samba error. When I attempt to join using the console, for troubleshooting purposes, I notice that the process hangs up at an AD entry for exchange OWA. Does anyone have any advice on how to work around this issue?
0
Comment
Question by:Jake Davis
  • 5
  • 5
10 Comments
 
LVL 62

Accepted Solution

by:
gheist earned 1500 total points
ID: 40564859
By zentyal you mean ripoff ubuntu samba?
No Samba does not work as RODC.
0
 

Author Comment

by:Jake Davis
ID: 40564886
While RODC would be ideal, I'm not married to the idea of having it work that way, I more want it to be a DC. The error I am trying to work around is within SAMBA, when at starts replicating the Exchange AD entries.
0
 
LVL 62

Expert Comment

by:gheist
ID: 40565079
Samba can be AD controller or AD client. Since all other setups make you pay Microsoft CAL, I see no purpose having other software in that position.
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:Jake Davis
ID: 40571554
Well, I want to use the Samba DC as a backup domain controller. Here is my issue. I enter this command to join the domain as a dc:

sudo samba-tool domain join tf-technology.local DC  -Uadministrator  --workgroup=tfti  --server=172.16.100.20  --dns-backend=BIND9_DLZ  --realm=TF-TECHNOLOGY.LOCAL  --site=Default-First-Site

I run into an issue here, and the domain join fails:

Failed to apply records: attribute 'msExchOWAAllowedFileTypes': value #1 on 'CN=owa (Default Web Site),CN=HTTP,CN=Protocols,CN=TFTIEXC01,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=TF-TECHNOLOGY,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=TF-TECHNOLOGY,DC=LOCAL' provided more than once: Attribute or value exists

Now, I've gone to this entry using the LDP tool on the domain controller, I've removed tons of entries and backed them  up so that I can reapply them once I get Samba synced up with the domain. What I'm looking for is any insight into why it doesn't like the entries and how to make it work around them. Can I provision the same domain using the Samba tool, and then use the Active directory tool to marry them together, or should I just keep removing entries?
0
 
LVL 62

Expert Comment

by:gheist
ID: 40572133
Grandfather of zentyal keeps documentation about editing smb.conf to join domain without creepy tools:
https://wiki.debian.org/AuthenticatingLinuxWithActiveDirectory
0
 

Author Comment

by:Jake Davis
ID: 40594108
Any advice at all on having it function as a DC? I've got most of the functionality out of it that I want, I would just like my users to be able to authenticate if the Virtual DC goes down and I don't want a physical windows DC.
0
 
LVL 62

Expert Comment

by:gheist
ID: 40594113
Read your question until you find DC being asked there.
0
 

Author Comment

by:Jake Davis
ID: 40820614
I've requested that this question be deleted for the following reason:

No one responded with an appropriate solution to my question.
0
 
LVL 62

Expert Comment

by:gheist
ID: 40820615
Sorry - you asked for RDC - you get answer NO
Then you flipped and flapped the DC requirement getting instructions on all possible other setups.
Please accept http:#a40564859 as complete answer
0
 

Author Comment

by:Jake Davis
ID: 40820954
Okay, I will accept that answer.
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question