This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Failed to join domain: failed to set machine spn: Operations error

I have to say that I switched from Untangle to Astaro and am very impressed. I only have 1 problem. I am trying to get SSO working on and it will not join to the domain.

When I hit apply with correct credentials it DOES add a computer object in the computers OU but it does not finish. Has anyone seen this before? I get different errors for password being wrong or user not found so something else is up. Domain is Win2k8 R2.

Thank you

name="SYSTEM_AD_JOIN_FAILED (Cannot join active directory domain.)" user="jasin" srcip="192.168.2.5" facility="webadmin" client="index.plx" call="ad_join_domain" joinresult="Failed to join domain: failed to set machine spn: Operations error" user_name="sin" domain="SIN-SERVER.NET"

This thread was automatically locked due to age.

Parents

0 BAlfson over 12 years ago

If an Astaro is supplying Mail Security, I usually give it a hostname equivalent to the content of the highest-priority MX record, for example, mail.domain.com. Then, assuming the internal domain is domain.local, when the Astaro is joined to the domain, it joins as mail. Did you use a resolvable FQDN as the hostname? Have you configured DNS in 'Network Services'?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Longman over 12 years ago in reply to BAlfson

You should have in "network services-dns-request routing' a dns request route pointing to your internal domain and your dns servers
Cancel
Vote Up 0 Vote Down

Cancel
0 Jasin over 12 years ago in reply to Longman

I do, Like I said a computer object is created. So Its making it to the domain. It is just erroring out in the process with the SPN.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Jasin over 12 years ago in reply to Longman

I do, Like I said a computer object is created. So Its making it to the domain. It is just erroring out in the process with the SPN.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data