(Solved) Unraid 6.10.3 Unable To Connect To Domain

[Geoff Bland]

I have an UNRAID server previously working fine and attached to an AD domain but after restart I noticed that the server name had gone back to "Tower" and the timezone had reset itself. I corrected both of these and rebooted.

All other settings seemed to be OK. All disks and shares intact.

 

But now I cannot connect to my AD domain - I could do with some help diagnosing this issue.

 

UNRAID version is 6.10.3. Domain Controller is Windows Server 2022.

 

Under Settings | SMB Settings

Enable SMB: Yes (Active Directory)
Hide "dot" files: No
Enable SMB Multi Channel: No
Enhanced macOS interoperability: Yes
Enable NetBIOS: No
Enable WSD: Yes
WSD options [experimental]: <blank>

Under Settings | SMB Settings | SMB Extras

Samba extra configuration:
[global]
idmap config * : backend = tdb
idmap config * : range = 1000-7999
idmap config NEWT : backend = rid
idmap config NEWT : range = 10000-4000000000

#unassigned_devices_start
#Unassigned devices share includes
   include = /tmp/unassigned.devices/smb-settings.conf
#unassigned_devices_end

Under Settings | SMB Settings | Active Directory Settings

AD Join Status: Not joined 
AD domain name (FQDN): NEWT.newtcomputing.com
AD short domain name: NEWT
AD account login: unraid
AD account password: ********
AD initial owner: unraid
AD initial group: Domain Users

 
Under Settings | Network
UNRAID server has a static IP. 
IPv4 DNS server has a static IP and points to primary Domain controller.

 

I can ping my Domain controller by fully qualified name:

root@UNRAID02:~# ping DC05.NEWT.newtcomputing.com
PING DC05.NEWT.newtcomputing.com (192.168.1.15) 56(84) bytes of data.
64 bytes from DC05.NEWT.newtcomputing.com (192.168.1.15): icmp_seq=1 ttl=128 time=0.308 ms

 

Times are in sync and the same for UNRAID server and AD server.

 

Kerberos settings are as follow:

root@UNRAID02:~# ls -la /etc/krb5.conf
-rw-r--r-- 1 root root 69 Jun 14 18:32 /etc/krb5.conf

root@UNRAID02:~# cat /etc/krb5.conf
[libdefaults]
    dns_lookup_kdc = true
    dns_lookup_realm = false

 

The "unraid" AD account I have used is a Domain Admin account. I have also tried other administrators accounts these also do not work.

 

I have tested I am using the correct password and that the "unraid" account is valid and works. 
 

I have deleted the computer object from AD and tried, this still did not work.

 

If I run the join from the command line I get an unhelpful message.

root@UNRAID02:~# net ads join -S 192.168.1.15 --user=administrator --password=******
Host is not configured as a member server.
Invalid configuration.  Exiting....
Failed to join domain: This operation is only allowed for the PDC of the domain.

 

unraid02-diagnostics-20221007-2206.zip

Edited October 8, 2022 by Geoff Bland
Solved

[Geoff Bland]

I finally found a solution to this. I disabled SMB and the re-enabled it again. 

 

First stop the array (From MAIN hit Stop)

In Settings | SMB in SMB Settings set SMB Enabled to "No"

In Settings | SMB in SMB Settings set SMB Enabled back to "Yes (Active Directory)"

Then enter the AD username and password to and Hit Join as usual and now it Joins the AD domain.

Finally restart the array.

 

I checked all configuration files before and after doing this, there's no significant different other than what you would expect now UNRAID is domain joined so I can only assume this is some error in a cached value in UNRAID or SMB that resetting SMB cleared out.

 

[Joedy]

On 10/9/2022 at 1:39 AM, Geoff Bland said:

I finally found a solution to this. I disabled SMB and the re-enabled it again. 

 

First stop the array (From MAIN hit Stop)

In Settings | SMB in SMB Settings set SMB Enabled to "No"

In Settings | SMB in SMB Settings set SMB Enabled back to "Yes (Active Directory)"

Then enter the AD username and password to and Hit Join as usual and now it Joins the AD domain.

Finally restart the array.

 

I checked all configuration files before and after doing this, there's no significant different other than what you would expect now UNRAID is domain joined so I can only assume this is some error in a cached value in UNRAID or SMB that resetting SMB cleared out.

 

Thanks, this was very helpful