From a couple of days we are trying to deploy a view architecture in a AD/samba4 environment. During sysprep, join fails with the following:
[...]
2013-11-29 14:06:19,358 [2544] INFO CSvmGaService - [svmGaService.cpp, 305] Successfully parsed the policy and disk signatures
2013-11-29 14:06:19,358 [2544] DEBUG CSvmGaService - [svmGaService.cpp, 131] Joining domain
2013-11-29 14:06:19,358 [2544] INFO Guest - [Guest.cpp, 273] Attempting to join P7-1128SP-01 to the domain ad.unimore.it
2013-11-29 14:06:20,187 [2544] FATAL Guest - [Guest.cpp, 286] Domain join failed: 1326
2013-11-29 14:06:20,374 [2544] FATAL CSvmGaService - [svmGaService.cpp, 134] Domain join failedError 1326 (0x52e): Errore durante l'accesso: nome utente sconosciuto o password non valida.
StackTrace:
----Backtrace using dbghelp.dll----
Module path: C:\Program Files\Common Files\VMware\View Composer Guest Agent\vmware-svi-ga.exe
Module directory: C:\Program Files\Common Files\VMware\View Composer Guest Agent\
backtrace[00] ebp 0x0012fa44 eip 0x0046305e params 0x0012faec 0x0012fac4 0x0012fac4 0x0012fa78 [C:\Program Files\Common Files\VMware\View Composer Guest Agent\vmware-svi-ga.exe base 0x00400000 0x0001:0x0006205e] (no symbol information)
backtrace[01] ebp 0x0012fa64 eip 0x0040924e params 0x0012fb78 0x0012fac4 0x0012fac4 0x0012fa9c [C:\Program Files\Common Files\VMware\View Composer Guest Agent\vmware-svi-ga.exe base 0x00400000 0x0001:0x0000824e] (no symbol information)
backtrace[02] ebp 0x0012fa84 eip 0x004093c8 params 0x0012fb78 0x0000052e 0x0012fb94 0x0012fac4 [C:\Program Files\Common Files\VMware\View Composer Guest Agent\vmware-svi-ga.exe base 0x00400000 0x0001:0x000083c8] (no symbol information)
backtrace[03] ebp 0x0012faa8 eip 0x0043467e params 0x0012fb78 0x0000052e 0x0012fdc0 0x004c1de0 [C:\Program Files\Common Files\VMware\View Composer Guest Agent\vmware-svi-ga.exe base 0x00400000 0x0001:0x0003367e] (no symbol information)
backtrace[04] ebp 0x0012fbdc eip 0x00436bbf params 0x7756bc8e 0x006c1f4c 0x0000000a 0000000000 [C:\Program Files\Common Files\VMware\View Composer Guest Agent\vmware-svi-ga.exe base 0x00400000 0x0001:0x00035bbf] (no symbol information)
backtrace[05] ebp 0x0012fdac eip 0x0041ab6d params 0x76d7d8e3 0x006c1f4b 0000000000 0x003b7bb8 [C:\Program Files\Common Files\VMware\View Composer Guest Agent\vmware-svi-ga.exe base 0x00400000 0x0001:0x00019b6d] (no symbol information)
backtrace[06] ebp 0x0012fee0 eip 0x00407bd2 params 0x00400000 0000000000 0x006c1f4b 0x0000000a [C:\Program Files\Common Files\VMware\View Composer Guest Agent\vmware-svi-ga.exe base 0x00400000 0x0001:0x00006bd2] (no symbol information)
backtrace[07] ebp 0x0012ff88 eip 0x00401185 params 0x7ffda000 0x0012ffd4 0x775a37eb 0x7ffda000 [C:\Program Files\Common Files\VMware\View Composer Guest Agent\vmware-svi-ga.exe base 0x00400000 0x0001:0x00000185] (no symbol information)
backtrace[08] ebp 0x0012ff94 eip 0x76d7ed5c params 0x7ffda000 0x77729b25 0000000000 0000000000 [C:\Windows\system32\kernel32.dll base 0x76d30000 0x0001:0x0004dd5c] (BaseThreadInitThunk + 0x0012)
backtrace[09] ebp 0x0012ffd4 eip 0x775a37eb params 0x00401000 0x7ffda000 0000000000 0000000000 [C:\Windows\SYSTEM32\ntdll.dll base 0x77540000 0x0001:0x000627eb] (RtlInitializeExceptionChain + 0x00ef)
backtrace[10] ebp 0x0012ffec eip 0x775a37be params 0x00401000 0x7ffda000 0000000000 0x78746341 [C:\Windows\SYSTEM32\ntdll.dll base 0x77540000 0x0001:0x000627be] (RtlInitializeExceptionChain + 0x00c2)
----End of backtrace----
2013-11-29 14:06:20,374 [2544] INFO SvmGa - [svmGa.cpp, 711] Domain join failed with 18
2013-11-29 14:06:20,390 [2376] FATAL VolumesReady - [VolumesReady.cpp, 135] Joining Domain failed for 1 times.
2013-11-29 14:06:20,390 [2376] DEBUG TimerWrapperWin32 - [TimerWrapperWin32.cpp, 31] Timer: DomainJoinRetryTimer-Handle created successfully with handle 00000194 periodic: false
2013-11-29 14:06:20,390 [2376] DEBUG TimerWrapperWin32 - [TimerWrapperWin32.cpp, 47] Starting timer: DomainJoinRetryTimer-Handle with timeout: 60000 milliseconds
2013-11-29 14:06:20,390 [1080] DEBUG WaitableManagerWin32 - [WaitableManagerWin32.cpp, 87] Updating callback for event DomainJoinRetryTimer-Handle (00000194)
2013-11-29 14:06:20,390 [1080] DEBUG WaitableManagerWin32 - [WaitableManagerWin32.cpp, 90] adding callback for event DomainJoinRetryTimer-Handle (00000194)
2013-11-29 14:06:20,390 [1080] DEBUG WaitableManagerWin32 - [WaitableManagerWin32.cpp, 179] Dispatching callback for event WaitableManagerInternal (00000134)
2013-11-29 14:07:20,390 [1080] INFO SvmStateMachine - [SvmStateMachine.cpp, 74] Queing an event
2013-11-29 14:07:20,390 [1080] DEBUG WaitableManagerWin32 - [WaitableManagerWin32.cpp, 179] Dispatching callback for event DomainJoinRetryTimer-Handle (00000194)
2013-11-29 14:07:20,390 [2376] INFO VolumesReady - [VolumesReady.cpp, 115] Launching the Join Domain script: C:\Program Files\Common Files\VMware\View Composer Guest Agent\vmware-svi-ga.exe /JoinDomain
2013-11-29 14:07:20,421 [3292] INFO CSvmGaService - [svmGaService.cpp, 87] Initialized the Service
2013-11-29 14:07:20,421 [3292] INFO CustomizationPersistentInfoReg - [CustomizationPersistentInfoReg.cpp, 98] Opened guest registry key for accessing customization info.
2013-11-29 14:07:20,421 [3292] DEBUG SvmDisk - [SvmDisk.cpp, 55] Found signature file //?/Volume{a4bd41b9-58f6-11e3-bd29-806e6f6e6963}/simvol.dat at volume \\?\Volume{a4bd41b9-58f6-11e3-bd29-806e6f6e6963}\ with mount point * and usage 001
2013-11-29 14:07:20,421 [3292] INFO CSvmGaService - [svmGaService.cpp, 214] Found policy file on the volume: \\?\Volume{a4bd41b9-58f6-11e3-bd29-806e6f6e6963}\
2013-11-29 14:07:20,483 [3292] INFO CSvmGaService - [svmGaService.cpp, 305] Successfully parsed the policy and disk signatures
2013-11-29 14:07:20,483 [3292] DEBUG CSvmGaService - [svmGaService.cpp, 131] Joining domain
2013-11-29 14:07:20,483 [3292] INFO Guest - [Guest.cpp, 273] Attempting to join P7-1128SP-01 to the domain ad.unimore.it
2013-11-29 14:07:20,983 [3292] FATAL Guest - [Guest.cpp, 286] Domain join failed: 1326
2013-11-29 14:07:21,108 [3292] FATAL CSvmGaService - [svmGaService.cpp, 134] Domain join failedError 1326 (0x52e): Errore durante l'accesso: nome utente sconosciuto o password non valida.
[...]
Note: "Errore durante l'accesso: nome utente sconosciuto o password non valida." means "Error during access: unknown username o invalid password".
Please have a look at the PDC logs at the time of the first join attempt:
[...]
[2013/11/29 14:06:19.935234, 2] ../source3/param/loadparm.c:3581(do_section)
Processing section "[netlogon]"
[2013/11/29 14:06:19.935515, 2] ../source3/param/loadparm.c:3581(do_section)
Processing section "[sysvol]"
[2013/11/29 14:06:19.935678, 2] ../source3/param/loadparm.c:3581(do_section)
Processing section "[public]"
[2013/11/29 14:06:19.935921, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
adding IPC service
...
[2013/11/29 14:06:19.937021, 3] ../source3/lib/access.c:338(allow_access)
Allowed connection from 155.185.132.194 (155.185.132.194)
[2013/11/29 14:06:19.937215, 3] ../source3/smbd/oplock.c:868(init_oplocks)
init_oplocks: initializing messages.
[2013/11/29 14:06:19.948668, 3] ../source3/smbd/process.c:1795(process_smb)
Transaction 0 of length 159 (0 toread)
[2013/11/29 14:06:19.948866, 3] ../source3/smbd/process.c:1398(switch_message)
switch message SMBnegprot (pid 13286) conn 0x0
[2013/11/29 14:06:19.950264, 3] ../source3/smbd/negprot.c:563(reply_negprot)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2013/11/29 14:06:19.950400, 3] ../source3/smbd/negprot.c:563(reply_negprot)
Requested protocol [LANMAN1.0]
[2013/11/29 14:06:19.950477, 3] ../source3/smbd/negprot.c:563(reply_negprot)
Requested protocol [Windows for Workgroups 3.1a]
[2013/11/29 14:06:19.950543, 3] ../source3/smbd/negprot.c:563(reply_negprot)
Requested protocol [LM1.2X002]
[2013/11/29 14:06:19.950608, 3] ../source3/smbd/negprot.c:563(reply_negprot)
Requested protocol [LANMAN2.1]
[2013/11/29 14:06:19.950690, 3] ../source3/smbd/negprot.c:563(reply_negprot)
Requested protocol [NT LM 0.12]
[2013/11/29 14:06:19.950754, 3] ../source3/smbd/negprot.c:563(reply_negprot)
Requested protocol [SMB 2.002]
[2013/11/29 14:06:19.950816, 3] ../source3/smbd/negprot.c:563(reply_negprot)
Requested protocol [SMB 2.???]
[2013/11/29 14:06:19.951237, 3] ../source3/smbd/smb2_negprot.c:243(smbd_smb2_request_process_negprot)
Selected protocol SMB2_FF
[2013/11/29 14:06:19.953412, 3] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'gssapi_spnego' registered
[2013/11/29 14:06:19.953523, 3] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'gssapi_krb5' registered
[2013/11/29 14:06:19.953603, 3] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'gssapi_krb5_sasl' registered
[2013/11/29 14:06:20.005009, 3] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'sasl-DIGEST-MD5' registered
[2013/11/29 14:06:20.005130, 3] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'schannel' registered
[2013/11/29 14:06:20.005206, 3] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'spnego' registered
[2013/11/29 14:06:20.005293, 3] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'ntlmssp' registered
[2013/11/29 14:06:20.005379, 3] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'krb5' registered
[2013/11/29 14:06:20.005447, 3] ../auth/gensec/gensec_start.c:870(gensec_register)
GENSEC backend 'fake_gssapi_krb5' registered
[2013/11/29 14:06:20.008029, 3] ../lib/ldb-samba/ldb_wrap.c:320(ldb_wrap_connect)
ldb_wrap open of secrets.ldb
[2013/11/29 14:06:20.010222, 3] ../source4/auth/ntlm/auth.c:673(auth_register)
AUTH backend 'sam' registered
[2013/11/29 14:06:20.010308, 3] ../source4/auth/ntlm/auth.c:673(auth_register)
AUTH backend 'sam_ignoredomain' registered
[2013/11/29 14:06:20.010399, 3] ../source4/auth/ntlm/auth.c:673(auth_register)
AUTH backend 'anonymous' registered
[2013/11/29 14:06:20.010493, 3] ../source4/auth/ntlm/auth.c:673(auth_register)
AUTH backend 'winbind' registered
[2013/11/29 14:06:20.010551, 3] ../source4/auth/ntlm/auth.c:673(auth_register)
AUTH backend 'winbind_wbclient' registered
[2013/11/29 14:06:20.010622, 3] ../source4/auth/ntlm/auth.c:673(auth_register)
AUTH backend 'name_to_ntstatus' registered
[2013/11/29 14:06:20.010693, 3] ../source4/auth/ntlm/auth.c:673(auth_register)
AUTH backend 'unix' registered
[2013/11/29 14:06:20.022653, 3] ../source3/smbd/negprot.c:671(reply_negprot)
Selected protocol SMB 2.???
[2013/11/29 14:06:20.028485, 3] ../source3/smbd/smb2_negprot.c:243(smbd_smb2_request_process_negprot)
Selected protocol SMB2_10
[2013/11/29 14:06:20.029194, 3] ../lib/ldb-samba/ldb_wrap.c:320(ldb_wrap_connect)
ldb_wrap open of secrets.ldb
[2013/11/29 14:06:20.222885, 3] ../lib/ldb-samba/ldb_wrap.c:320(ldb_wrap_connect)
ldb_wrap open of secrets.ldb
[2013/11/29 14:06:20.240835, 3] ../lib/ldb-samba/ldb_wrap.c:320(ldb_wrap_connect)
ldb_wrap open of privilege.ldb
[2013/11/29 14:06:20.263944, 3] ../source3/smbd/password.c:138(register_homes_share)
No home directory defined for user 'ATENEOAD\P7-1128SP-01$'
[2013/11/29 14:06:20.266332, 3] ../source3/lib/access.c:338(allow_access)
Allowed connection from 155.185.132.194 (155.185.132.194)
[2013/11/29 14:06:20.266686, 3] ../source3/smbd/service.c:612(make_connection_snum)
Connect path is '/tmp' for service [IPC$]
[2013/11/29 14:06:20.266940, 3] ../source3/smbd/vfs.c:113(vfs_init_default)
Initialising default vfs hooks
[2013/11/29 14:06:20.267093, 3] ../source3/smbd/vfs.c:139(vfs_init_custom)
Initialising custom vfs hooks from [/[Default VFS]/]
[2013/11/29 14:06:20.267200, 3] ../source3/smbd/vfs.c:139(vfs_init_custom)
Initialising custom vfs hooks from [acl_xattr]
[2013/11/29 14:06:20.271133, 2] ../lib/util/modules.c:191(do_smb_load_module)
Module 'acl_xattr' loaded
[2013/11/29 14:06:20.271291, 3] ../source3/smbd/vfs.c:139(vfs_init_custom)
Initialising custom vfs hooks from [dfs_samba4]
[2013/11/29 14:06:20.271416, 2] ../source3/modules/vfs_acl_xattr.c:193(connect_acl_xattr)
connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service IPC$
[2013/11/29 14:06:20.278980, 3] ../source3/smbd/service.c:848(make_connection_snum)
155.185.132.194 (ipv4:155.185.132.194:49157) connect to service IPC$ initially as user ATENEOAD\P7-1128SP-01$ (uid=3000664, gid=3000019) (pid 13286)
[2013/11/29 14:06:30.444236, 3] ../source3/smbd/service.c:1122(close_cnum)
155.185.132.194 (ipv4:155.185.132.194:49157) closed connection to service IPC$
[2013/11/29 14:06:30.446537, 2] ../source3/smbd/smb2_server.c:3250(smbd_smb2_request_incoming)
smbd_smb2_request_incoming: client read error NT_STATUS_CONNECTION_RESET
[2013/11/29 14:06:30.446901, 3] ../source3/smbd/server_exit.c:212(exit_server_common)
Server exit (NT_STATUS_CONNECTION_RESET)
[2013/11/29 14:07:20.942904, 2] ../source3/param/loadparm.c:3581(do_section)
Processing section "[netlogon]"
[2013/11/29 14:07:20.943172, 2] ../source3/param/loadparm.c:3581(do_section)
Processing section "[sysvol]"
[2013/11/29 14:07:20.943390, 2] ../source3/param/loadparm.c:3581(do_section)
Processing section "[public]"
[2013/11/29 14:07:20.943614, 3] ../source3/param/loadparm.c:1773(lp_add_ipc)
adding IPC service
[...]
It looks credentials are fine.
So as a newcomer I'm a bit lost. I would like to know if it's possibile to debug specifically the join phase. As an aside: the StackTrace from the vmware-svi-ga.exe view windows agent is normal or is a hint something is amiss? Can you point me to more documentation?
Thank you,
Francesc0