FreeNAS 11.1 Unable to join Domain

[Paze]

Hi,

hope someone can help me out, getting quiet frustrated not beeing able to join my domain.
My setup is this:
- FreeNAS 11.1 fresh installed in an ESXI 6.5 VM
- Supermicro X10 something board
- Xeon E5-1650v3
- 32GB ECC RAM from Crucial
- Two SSD Datastores for the VMs
- 1x 10TB Seagate Ironwolf, will be directly passed through via the recommended HBA from IBM (dont have the name rn)

This is what my error logs say:

Code:

Nov  7 09:24:46 freenas2 ActiveDirectory: /usr/local/bin/python /usr/local/bin/midclt call notifier.stop cifs
Nov  7 09:24:47 freenas2 ActiveDirectory: /usr/sbin/service ix-hostname quietstart
Nov  7 09:24:47 freenas2 ActiveDirectory: /usr/sbin/service ix-kerberos quietstart default DOMAIN.NET
Nov  7 09:24:48 freenas2 ActiveDirectory: /usr/sbin/service ix-nsswitch quietstart
Nov  7 09:24:48 freenas2 ActiveDirectory: /usr/sbin/service ix-ldap quietstart
Nov  7 09:24:48 freenas2 ActiveDirectory: /usr/sbin/service ix-kinit quietstart
Nov  7 09:24:49 freenas2 ActiveDirectory: kerberos_start: /usr/bin/kinit --renewable --password-file=/tmp/tmp.zc7WSiRr ADMINISTRATOR@DOMAIN.NET
Nov  7 09:24:50 freenas2 ActiveDirectory: kerberos_start: Successful
Nov  7 09:24:50 freenas2 ActiveDirectory: /usr/sbin/service ix-kinit status
Nov  7 09:24:50 freenas2 ActiveDirectory: kerberos_status: klist -t
Nov  7 09:24:50 freenas2 ActiveDirectory: kerberos_status: Successful
Nov  7 09:24:50 freenas2 ActiveDirectory: /usr/local/bin/python /usr/local/bin/midclt call notifier.start cifs
Nov  7 09:24:53 freenas2 ActiveDirectory: /usr/sbin/service ix-activedirectory quietstart
Nov  7 09:24:53 freenas2 ActiveDirectory: activedirectory_start: checking if we are joined already
Nov  7 09:24:53 freenas2 ActiveDirectory: AD_testjoin_domain: net -k ads testjoin DOMAIN.NET -S srv-dc01.DOMAIN.NET -p 389
Nov  7 09:24:56 freenas2 ActiveDirectory: AD_testjoin_domain: Failed
Nov  7 09:24:56 freenas2 ActiveDirectory: activedirectory_start: trying to join domain
Nov  7 09:24:56 freenas2 ActiveDirectory: AD_join_domain: net -k ads join DOMAIN.NET -S srv-dc01.DOMAIN.NET -p 389
Nov  7 09:24:58 freenas2 ActiveDirectory: AD_join_domain: Successful
Nov  7 09:24:58 freenas2 ActiveDirectory: /usr/sbin/service ix-activedirectory status
Nov  7 09:25:00 freenas2 ActiveDirectory: activedirectory_status: checking status
Nov  7 09:25:00 freenas2 ActiveDirectory: AD_status_domain: net -k ads status DOMAINT.NET
Nov  7 09:25:01 freenas2 ActiveDirectory: AD_status_domain: Okay
Nov  7 09:25:01 freenas2 ActiveDirectory: /usr/local/bin/python /usr/local/bin/midclt call notifier.stop cifs
Nov  7 09:25:03 freenas2 ActiveDirectory: /usr/local/bin/python /usr/local/bin/midclt call notifier.start cifs
Nov  7 09:25:05 freenas2 ActiveDirectory: /usr/sbin/service ix-pam quietstart
Nov  7 09:25:06 freenas2 ActiveDirectory: /usr/sbin/service ix-cache quietstart &
Nov  7 09:25:14 freenas2 ActiveDirectory: kerberos_status: klist -t
Nov  7 09:25:14 freenas2 ActiveDirectory: kerberos_status: Successful
Nov  7 09:25:14 freenas2 ActiveDirectory: activedirectory_status: checking status
Nov  7 09:25:14 freenas2 ActiveDirectory: AD_status_domain: net -k ads status DOMAIN.NET
Nov  7 09:25:15 freenas2 ActiveDirectory: AD_status_domain: Okay
Nov  7 09:25:15 freenas2 uwsgi: [middleware.exceptions:36] [MiddlewareError: Active Directory failed to reload.]

I can ping every server, so my network settings should be fine.

Grateful for any help.

 

[dlavigne]

Were you able to resolve this? If not, please create a report at bugs.freenas.org that includes your debug (System -> Advanced -> Save Debug). Post the issue here (though it will be hidden until a dev has a chance to review the debug).

 

[Paze]

Were you able to resolve this? If not, please create a report at bugs.freenas.org that includes your debug (System -> Advanced -> Save Debug). Post the issue here (though it will be hidden until a dev has a chance to review the debug).

Hi,

yes i was able to fix this problem by mysfeld.
The issue was about the NTP configuration in my network, as it was like this:
Firewall - > ntp.pool.org
Domaincontroller - Uses Firewall
Freenas - > Used ntp.pool.org directly - > This was the problem, I needed to change the ntp to the firewall, so every server uses exactly the same...
A bit strange for me, but whatever. Its working fine now.