This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Joining the domain failed

Hello people, I need your help!

I can't rejoin the domain.
This was working correctly and since a few weeks ago I received the message joining the domain failed
No changes were made to the server or the sophos

Model SG210
Firmware 9707-5

I don't know what to do in this situation

Thank you!

This thread was automatically locked due to age.

0 Amodin over 2 years ago

Most likely a DNS issue. There may be a problem with service records not updating on your DNS.

OPNSense 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
16GB Memory | 500GB SSD HDD | ATT Fiber 1GB
(Former Sophos UTM Veteran, Former XG Rookie)
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte over 2 years ago

Your hostname is fully qualified (host.domain.something)?
... and DNS or policy-DNS points to your domain-dns-servers?

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel

0 Sistemas Huinoil over 2 years ago in reply to dirkkotte

Hi Dirkkotte, yes!

hostname is sophos.domain.com

We have a DNS Server on windows server 2008 r2

Under DNS > Global >Local LAN
Forwarders > ISP and Dns server
Request Routing > Dns Server

When I use DNS lookup from UTM I'm able to resolve IP to hostnames, On my DNS server I have correct records and zones for forward and reverse.

Trying "hccs002.domain.com"

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42053

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1



;; QUESTION SECTION:

;hccs002.domain.com.		IN	ANY



;; ANSWER SECTION:

hccs002.domain.com.	86400	IN	SOA	hccs002.domain.com. do-not-reply.fw-notify.net. 1633439131 10800 900 604800 60

hccs002.domain.com.	60	IN	NS	hccs002.domain.com.

hccs002.domain.com.	60	IN	A	192.168.1.20



;; ADDITIONAL SECTION:

hccs002.domain.com.	60	IN	A	192.168.1.20



Received 147 bytes from 127.0.0.1#53 in 0 ms




Thank you for your help

0 Sistemas Huinoil over 2 years ago in reply to Amodin

Hi Amodin,

Where I can verify that? in the logs of the DNS server I do not find errors.

Thank you for your help!
Cancel
Vote Up 0 Vote Down

Cancel
0 Amodin over 2 years ago in reply to Sistemas Huinoil

You can check it at the command line using nslookup, and setting the query to SRV, something like:

C:\>nslookup q=SRV _sub.domain.com

OPNSense 64-bit | Intel Xeon 4-core v3 1225 3.20Ghz
16GB Memory | 500GB SSD HDD | ATT Fiber 1GB
(Former Sophos UTM Veteran, Former XG Rookie)
Cancel
Vote Up 0 Vote Down

Cancel
0 RemoHehlert over 2 years ago in reply to Sistemas Huinoil

is that one realy the Admin account?

Administrator instand of Administrador
Cancel
Vote Up 0 Vote Down

Cancel
0 Sistemas Huinoil over 2 years ago in reply to RemoHehlert

Hi RemoHehlert, That is right!

Admin accoutn is Administrador
Cancel
Vote Up 0 Vote Down

Cancel
0 Sistemas Huinoil over 2 years ago in reply to RemoHehlert
I have created a new user in AD with admin right's and it has worked
Cancel
Vote Up 0 Vote Down

Cancel