<html><body><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt; color: #000000"><div><div>Hi, we are having some issues creating a IPA-AD trust, using password, and not shared secret, because of the error where name routing not getting created on AD if using shared secret.<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>We have a AD domain tree with a top level domain and a domain below that where the users are located. We try to join the top level domain as a trust exists between those tow domains.<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>Everything worked in our test setup, where we joined using a shared secret.<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>We try to join our AD using this command:<br data-mce-bogus="1"></div><div>ipa trust-add <ROOT REALM> --type=ad --admin <DOMAIN MASTER USER><span class="Object" role="link" id="OBJ_PREFIX_DWT2214_ZmEmailObjectHandler"><span class="Object" role="link" id="OBJ_PREFIX_DWT2221_ZmEmailObjectHandler">@<REALM></span></span> --password</div><div><br data-mce-bogus="1"></div><div>However, we receive one of these two error messages:</div><div><br data-mce-bogus="1"></div><div>ipa: ERROR: CIFS server communication error: code "-<span class="Object" role="link" id="OBJ_PREFIX_DWT2215_com_zimbra_phone"><a href="callto:1073741712" onclick="window.top.Com_Zimbra_Phone.unsetOnbeforeunload()" data-mce-href="callto:1073741712">1073741712</a></span>",<br> message "Invalid workstation" (both may be "None")</div><div><br data-mce-bogus="1"></div><div>ipa: ERROR: AD domain controller complains about communication <br>sequence. It may mean unsynchronized time on both sides, for example</div><div><br data-mce-bogus="1"></div><div>I think the first message was caused by some login restrictions on the user used to join, as it seems we don't receive that error massage anymore, and we receive the second error every time we try to join.<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>We have tried pointing it to a specific server with the "--server" option, but that didn't change anything.</div><div><br data-mce-bogus="1"></div></div><div><br></div><div data-marker="__SIG_POST__">-- <br></div><div><p style="MARGIN: 5px 0px 0px; FONT-FAMILY: arial,verdana,sans-serif; FONT-SIZE: 12px" data-mce-style="margin: 5px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 12px;">Med venlig hilsen</p><p style="MARGIN: 10px 0px 0px; FONT-FAMILY: arial,verdana,sans-serif; FONT-SIZE: 14px" data-mce-style="margin: 10px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 14px;"><b>Troels Hansen</b></p><p style="MARGIN: 3px 0px 0px; FONT-FAMILY: arial,verdana,sans-serif; FONT-SIZE: 12px" data-mce-style="margin: 3px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 12px;">Systemkonsulent</p><p style="MARGIN: 4px 2px 0px 0px; FONT-FAMILY: arial,verdana,sans-serif; COLOR: #4c4c4c; FONT-SIZE: 14px; FONT-WEIGHT: bold" data-mce-style="margin: 4px 2px 0px 0px; font-family: arial,verdana,sans-serif; color: #4c4c4c; font-size: 14px; font-weight: bold;">Casalogic A/S</p><div><img src="http://www.casalogic.dk/signatur/casalogic_green_spacer_line.png" data-mce-src="http://www.casalogic.dk/signatur/casalogic_green_spacer_line.png" border="0"></div><p style="MARGIN: 5px 0px 0px; FONT-FAMILY: arial,verdana,sans-serif; FONT-SIZE: 12px" data-mce-style="margin: 5px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 12px;">T (+45) 70 20 10 63</p><p style="MARGIN: 5px 0px 0px; FONT-FAMILY: arial,verdana,sans-serif; FONT-SIZE: 12px" data-mce-style="margin: 5px 0px 0px; font-family: arial,verdana,sans-serif; font-size: 12px;">M (+45) 22 43 71 57</p><div><a title="Download vCard" href="http://www.casalogic.dk/signatur/th.vcf" data-mce-href="http://www.casalogic.dk/signatur/th.vcf"><img src="http://www.casalogic.dk/signatur/vcard_download_small.png" data-mce-src="http://www.casalogic.dk/signatur/vcard_download_small.png" border="0"></a> <a title="Follow us on LinkedIn" href="http://www.linkedin.com/company/67524" data-mce-href="http://www.linkedin.com/company/67524"><img src="http://www.casalogic.dk/signatur/linkedin_logo_20x20.png" data-mce-src="http://www.casalogic.dk/signatur/linkedin_logo_20x20.png" border="0"></a> <a title="Follow us on Twitter" href="http://twitter.com/casalogic" data-mce-href="http://twitter.com/casalogic"><img src="http://www.casalogic.dk/signatur/twitter_logo_20x20.png" data-mce-src="http://www.casalogic.dk/signatur/twitter_logo_20x20.png" border="0"></a><br></div><div>Red Hat, SUSE, VMware, Citrix, Novell, Yellowfin BI, EnterpriseDB, Sophos og meget mere.<br></div></div></div></body></html>