<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 04/08/2015 12:42 PM, Aric Wilisch
wrote:<br>
</div>
<blockquote
cite="mid:A57F95C8-C075-4D24-B5AE-163A62E7DEC0@gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
I’m having issues with getting my RHEL 7 server running Freeipa 4
to join my Windows 2012R2 domain.
<div class=""><br class="">
</div>
<div class="">DNS checks out fine. When I try to establish the
join I get the below listed errors popping up. I’ve tried both
creating the trust from Freeipa and just this morning I setup
the trust on the AD side and tried to use the —trust-secret
option. There are no firewalls between them, but they are on
different subnets. </div>
<div class=""><br class="">
</div>
<div class="">Any help would be great. This is holding up a
project and I’m not able to figure out what’s going on. </div>
<div class=""><br class="">
</div>
<div class="">Thanks in advance.</div>
<div class=""><br class="">
</div>
<div class=""><span style="color: rgba(0, 0, 0, 0.8); font-family:
'Roboto Slab', 'Times New Roman', serif; font-size: 14px;
line-height: 19px; white-space: pre-wrap; widows: 1;
background-color: rgb(255, 255, 255);" class="">finddcs:
Skipping DC 10.32.145.134 with server_type=0x0000f17c -
required 0x00000119</span><br style="color: rgba(0, 0, 0,
0.8); font-family: 'Roboto Slab', 'Times New Roman', serif;
font-size: 14px; line-height: 19px; white-space: pre-wrap;
widows: 1; background-color: rgb(255, 255, 255);" class="">
<span style="color: rgba(0, 0, 0, 0.8); font-family: 'Roboto
Slab', 'Times New Roman', serif; font-size: 14px; line-height:
19px; white-space: pre-wrap; widows: 1; background-color:
rgb(255, 255, 255);" class="">finddcs: No matching CLDAP
server found</span><br style="color: rgba(0, 0, 0, 0.8);
font-family: 'Roboto Slab', 'Times New Roman', serif;
font-size: 14px; line-height: 19px; white-space: pre-wrap;
widows: 1; background-color: rgb(255, 255, 255);" class="">
<span style="color: rgba(0, 0, 0, 0.8); font-family: 'Roboto
Slab', 'Times New Roman', serif; font-size: 14px; line-height:
19px; white-space: pre-wrap; widows: 1; background-color:
rgb(255, 255, 255);" class="">[Wed Apr 08 12:39:48.359684
2015] [:error] [pid 8402] ipa: INFO: [jsonserver_session] </span><a
moz-do-not-send="true" rel="nofollow" target="_blank"
href="mailto:admin@PREPROD.FIOPTICS.INT"
style="-webkit-user-drag: none; color: rgb(102, 17, 204);
cursor: text; font-family: 'Roboto Slab', 'Times New Roman',
serif; font-size: 14px; line-height: 19px; white-space:
pre-wrap; widows: 1; background-color: rgb(255, 255, 255);"
class="">admin@PREPROD.FIOPTICS.INT</a><span style="color:
rgba(0, 0, 0, 0.8); font-family: 'Roboto Slab', 'Times New
Roman', serif; font-size: 14px; line-height: 19px;
white-space: pre-wrap; widows: 1; background-color: rgb(255,
255, 255);" class="">: </span><a moz-do-not-send="true"
rel="nofollow" target="_blank"
href="http://trust_add%28u%27fioptics.int%27%2C/"
style="-webkit-user-drag: none; color: rgb(102, 17, 204);
cursor: text; font-family: 'Roboto Slab', 'Times New Roman',
serif; font-size: 14px; line-height: 19px; white-space:
pre-wrap; widows: 1; background-color: rgb(255, 255, 255);"
class="">trust_add(u'fioptics.int',</a><span style="color:
rgba(0, 0, 0, 0.8); font-family: 'Roboto Slab', 'Times New
Roman', serif; font-size: 14px; line-height: 19px;
white-space: pre-wrap; widows: 1; background-color: rgb(255,
255, 255);" class=""> trust_type=u'ad',
realm_server=u'ppad01', trust_secret=u'********', all=False,
raw=False, version=u'2.114'): NotFound</span><br class="">
<div apple-content-edited="true" class="">
<span class="Apple-style-span" style="border-collapse:
separate; border-spacing: 0px;">
<div class=""><br class="Apple-interchange-newline">
Regards,</div>
<div class="">------------------------------------------</div>
<div class="">Aric Wilisch</div>
<div class=""><a moz-do-not-send="true"
href="mailto:awilisch@gmail.com" class="">awilisch@gmail.com</a></div>
<div class=""><br class="">
</div>
</span><br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
It seems that IPA could not detect the valid AD DC.<br>
<br>
What is the version and the type of the DC with mentioned IP? Is it
a primary DC? If not where is the primary one?<br>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>