{"id":795,"date":"2010-11-09T10:58:43","date_gmt":"2010-11-09T16:58:43","guid":{"rendered":"http:\/\/thepizzy.net\/blog\/?p=795"},"modified":"2011-02-25T08:34:00","modified_gmt":"2011-02-25T14:34:00","slug":"astaro-sg-joining-domain-failed","status":"publish","type":"post","link":"https:\/\/thepizzy.net\/blog\/2010\/11\/astaro-sg-joining-domain-failed\/","title":{"rendered":"Astaro SG &#8220;Joining domain failed&#8221;"},"content":{"rendered":"<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" data-attachment-id=\"812\" data-permalink=\"https:\/\/thepizzy.net\/blog\/2010\/11\/astaro-sg-joining-domain-failed\/astaro_logo\/\" data-orig-file=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/astaro_logo.jpg?fit=765%2C283&amp;ssl=1\" data-orig-size=\"765,283\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;1&quot;}\" data-image-title=\"www.astaro.com\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/astaro_logo.jpg?fit=580%2C215&amp;ssl=1\" class=\"alignleft size-thumbnail wp-image-812\" title=\"www.astaro.com\" src=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/astaro_logo-150x55.jpg?resize=150%2C55\" alt=\"Astaro Logo\" width=\"150\" height=\"55\" srcset=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/astaro_logo.jpg?resize=150%2C55&amp;ssl=1 150w, https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/astaro_logo.jpg?resize=300%2C110&amp;ssl=1 300w, https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/astaro_logo.jpg?w=765&amp;ssl=1 765w\" sizes=\"auto, (max-width: 150px) 100vw, 150px\" \/>I just spent the last 2 business days working on trying to get my Astaro SG 120 v7.507 to re-join the domain, after I deleted the &#8220;computer&#8221; entry from our Windows 2003 SBS AD. After deleting the computer entry, I rebooted the Astaro box and attempted to join it to the domain (with the same flawless effort I experienced during the initial setup). No luck.<\/p>\n<p>I ran across several Astaro User Forum posts telling people the same things over and over about what to check, and none of it was helping.<\/p>\n<p>I&#8217;ll try and give a run through of some error message appearances from the Fallback error log, and what you should do to fix them. If you have more, leave them in the comments below, and I&#8217;ll add them.<\/p>\n<blockquote><p>ads_get_dnshostname: No dNSHostName attribute!<\/p><\/blockquote>\n<figure id=\"attachment_798\" aria-describedby=\"caption-attachment-798\" style=\"width: 590px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_0957.png\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" data-attachment-id=\"798\" data-permalink=\"https:\/\/thepizzy.net\/blog\/2010\/11\/astaro-sg-joining-domain-failed\/2010-11-09_0957\/\" data-orig-file=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_0957.png?fit=590%2C366&amp;ssl=1\" data-orig-size=\"590,366\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"Astaro FQDN Hostname\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_0957.png?fit=580%2C360&amp;ssl=1\" class=\"size-full wp-image-798\" title=\"Astaro FQDN Hostname\" src=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_0957.png?resize=580%2C360\" alt=\"\" width=\"580\" height=\"360\" srcset=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_0957.png?w=590&amp;ssl=1 590w, https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_0957.png?resize=300%2C186&amp;ssl=1 300w, https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_0957.png?resize=150%2C93&amp;ssl=1 150w\" sizes=\"auto, (max-width: 580px) 100vw, 580px\" \/><\/a><figcaption id=\"caption-attachment-798\" class=\"wp-caption-text\">You need to make sure you have a Host Name specified in the FQDN style in the Management &gt; System Settings &gt; Hostname tab<\/figcaption><\/figure>\n<hr \/>\n<blockquote><p>ads_keytab_add_entry: unable to determine machine account&#8217;s dns name in AD<\/p><\/blockquote>\n<ul>\n<li>You need to make sure your Astaro box doesn&#8217;t show up as a Computer listed in Active Directory anywhere there are computers listed, then you need to make sure there is a DNS Host (A) entry for your hostname, and also you need to reboot your Active Directory and\/or DNS server. (For me, they were the same Windows SBS Box, but a reboot fixed this error message.)<\/li>\n<\/ul>\n<hr \/>\n<blockquote><p>\u00c2\u00bbclock skew too great\u00c2\u00ab<\/p><\/blockquote>\n<ul>\n<li>You need to make sure the Time &amp; Date on both the Astaro box and the Active Directory server are no more than 5 minutes apart.<\/li>\n<\/ul>\n<hr \/>\n<blockquote><p>\u00c2\u00bbpre-authentication failed\u00c2\u00ab<\/p><\/blockquote>\n<figure id=\"attachment_804\" aria-describedby=\"caption-attachment-804\" style=\"width: 581px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1026.png\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" data-attachment-id=\"804\" data-permalink=\"https:\/\/thepizzy.net\/blog\/2010\/11\/astaro-sg-joining-domain-failed\/2010-11-09_1026\/\" data-orig-file=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1026.png?fit=645%2C401&amp;ssl=1\" data-orig-size=\"645,401\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"2010-11-09_1026\" data-image-description=\"\" data-image-caption=\"&lt;p&gt;Make sure the Username\/Password you&amp;#8217;re using to join the domain are correct. They should look like the image above.&lt;\/p&gt;\n\" data-large-file=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1026.png?fit=580%2C361&amp;ssl=1\" class=\"size-full wp-image-804  \" title=\"Single-Sign-On Settings\" src=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1026.png?resize=580%2C360\" alt=\"\" width=\"580\" height=\"360\" srcset=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1026.png?w=645&amp;ssl=1 645w, https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1026.png?resize=300%2C186&amp;ssl=1 300w, https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1026.png?resize=150%2C93&amp;ssl=1 150w\" sizes=\"auto, (max-width: 580px) 100vw, 580px\" \/><\/a><figcaption id=\"caption-attachment-804\" class=\"wp-caption-text\">Make sure the Username\/Password you&#39;re using to join the domain are correct. They should look like the image above.<\/figcaption><\/figure>\n<hr \/>\n<p>Below is the fix that finally worked for me, but I never saw anything in the User Forums (or anywhere else, for that matter) related to these error codes and the Astaro box (only to Samba and Linux Servers).<\/p>\n<p>&nbsp;<\/p>\n<blockquote><p>libsmb\/clientgen.c:cli_receive_smb<\/p>\n<p>rpc_client\/cli_pipe.c:rpc_api_pipe<\/p>\n<p>pipe \\lsarpc fnum<\/p><\/blockquote>\n<ul>\n<li>This means that the Intrusion Prevention System is preventing the Active Directory server from approving the Active Directory join. You need to create an Exception like this:<\/li>\n<\/ul>\n<figure id=\"attachment_808\" aria-describedby=\"caption-attachment-808\" style=\"width: 634px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1032.png\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" data-attachment-id=\"808\" data-permalink=\"https:\/\/thepizzy.net\/blog\/2010\/11\/astaro-sg-joining-domain-failed\/2010-11-09_1032\/\" data-orig-file=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1032.png?fit=1056%2C640&amp;ssl=1\" data-orig-size=\"1056,640\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"Join AD Fix\" data-image-description=\"\" data-image-caption=\"&lt;p&gt;Go to Network Security &gt; Intrusion Prevention &gt; Exceptions and create a new Exception that Skips &amp;#8220;Intrusion Prevention&amp;#8221; and list the Active Directory Server in the Source Network area.&lt;\/p&gt;\n\" data-large-file=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1032.png?fit=580%2C352&amp;ssl=1\" class=\"size-full wp-image-808 \" title=\"Join AD Fix\" src=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1032.png?resize=580%2C351\" alt=\"\" width=\"580\" height=\"351\" srcset=\"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1032.png?w=1056&amp;ssl=1 1056w, https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1032.png?resize=300%2C181&amp;ssl=1 300w, https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1032.png?resize=1024%2C620&amp;ssl=1 1024w, https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1032.png?resize=150%2C90&amp;ssl=1 150w, https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/2010-11-09_1032.png?resize=768%2C465&amp;ssl=1 768w\" sizes=\"auto, (max-width: 580px) 100vw, 580px\" \/><\/a><figcaption id=\"caption-attachment-808\" class=\"wp-caption-text\">Go to Network Security &gt; Intrusion Prevention &gt; Exceptions and create a new Exception that Skips &quot;Intrusion Prevention&quot; and list the Active Directory Server in the Source Network area.<\/figcaption><\/figure>\n<hr \/>\n<p>I&#8217;m sure there are probably more items in the Fallback error logs that folks have encountered. Surprisingly, I didn&#8217;t even come across <a title=\"Astaro: Troubleshooting Active Directory\" href=\"https:\/\/support.astaro.com\/support\/images\/8\/8a\/AD_troubleshooting.pdf\" target=\"_blank\">this PDF document<\/a> detailing a lot of them during my searches until I was researching the error codes for this post. Check that document out and see if your answer is in there.<\/p>\n<p>&nbsp;<\/p>\n<p>The main rebuttals from most of the &#8220;suggestions&#8221; you&#8217;ll find on the User Forums are:<\/p>\n<ol>\n<li>You <strong>don&#8217;t<\/strong> need to create a Pre-Win2000 Computer in Active Directory for this to work.<\/li>\n<li>You <strong>can&#8217;t<\/strong> have an existing computer entry in Active Directory for the hostname you&#8217;ve given your Astaro box.<\/li>\n<li>You <strong>should<\/strong> create a DNS Host (A) entry for the Astaro box, if you run a DNS server outside of the Astaro box<\/li>\n<li>The Time &amp; Date on both the Server and Astaro Box <strong>need to be<\/strong> within 5 minutes of each other.<\/li>\n<li>You <strong>don&#8217;t<\/strong> have to be able to ping the Astaro box from the server for this to work.<\/li>\n<li>You <strong>do have to<\/strong> be able to ping the Active Directory server from the Astaro box&#8217;s Support &gt; Tools area<\/li>\n<li>Domains ending in .local <strong>will work<\/strong>.<\/li>\n<li>You <strong>don&#8217;t have to<\/strong> use all CAPS when filling in the hostname\u00c2\u00a0 &amp; domain name, but it&#8217;s suggested by the Astaro people. It won&#8217;t make a difference to DNS &#8211; CAPS or lowercase both resolve the same.<\/li>\n<\/ol>\n<p>As I mentioned above, if you have any other error messages or tips or suggestions, etc., related to getting the Astaro box on the domain, please post them in the comments. Too many people have spent too long trying to get things to work simply because the information wasn&#8217;t out there when they were searching.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I just spent the last 2 business days working on trying to get my Astaro SG 120 v7.507 to re-join the domain, after I deleted the &#8220;computer&#8221; entry from our Windows 2003 SBS AD. After deleting the computer entry, I rebooted the Astaro box and attempted to join it to the domain (with the same [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":812,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[506,528,225,3],"tags":[193,684,683,672,667,668,675,671,681,680,682,677,676,670,674,685,678,679,673,669],"class_list":["post-795","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-how-to","category-security-tech","category-servers","category-tech","tag-active-directory","tag-ads_get_dnshostname","tag-ads_keytab_add_entry","tag-asg-120","tag-astaro","tag-astaro-sg-120","tag-authentication","tag-cant-join-domain","tag-clientgen-ccli_receive_smb","tag-cli_pipe-crpc_api_pipe","tag-clock-skew-too-great","tag-fallback-logs","tag-intrusion-prevention","tag-joining-domain-failed","tag-kerberos","tag-pipe-lsarpc-fnum","tag-rpc","tag-rpc_client","tag-samba","tag-sso-astaro"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/thepizzy.net\/blog\/wp-content\/uploads\/2010\/11\/astaro_logo.jpg?fit=765%2C283&ssl=1","jetpack_likes_enabled":false,"jetpack_shortlink":"https:\/\/wp.me\/prOO4-cP","jetpack-related-posts":[],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/thepizzy.net\/blog\/wp-json\/wp\/v2\/posts\/795","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thepizzy.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thepizzy.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thepizzy.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thepizzy.net\/blog\/wp-json\/wp\/v2\/comments?post=795"}],"version-history":[{"count":20,"href":"https:\/\/thepizzy.net\/blog\/wp-json\/wp\/v2\/posts\/795\/revisions"}],"predecessor-version":[{"id":816,"href":"https:\/\/thepizzy.net\/blog\/wp-json\/wp\/v2\/posts\/795\/revisions\/816"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thepizzy.net\/blog\/wp-json\/wp\/v2\/media\/812"}],"wp:attachment":[{"href":"https:\/\/thepizzy.net\/blog\/wp-json\/wp\/v2\/media?parent=795"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thepizzy.net\/blog\/wp-json\/wp\/v2\/categories?post=795"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thepizzy.net\/blog\/wp-json\/wp\/v2\/tags?post=795"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}