<div dir="ltr">Hello!<div><br></div><div>I figured out a way to achieve what I need. Unfortunately, Realmd is not ready for prime time. For huge networks, for example, with Disjoint Namespaces, lots of DNS sub-domains, and with machines that share the same hostname, but on different forward zones, then, Realmd can not be used (or at least, it is very hard to use it).</div><div><br></div><div>So, how I "fixed" it?</div><div><br></div><div>First, I transformed the obsolete "netbios name" in some kind of ID, like this:</div><div><br></div><div>* "<a href="http://ubuntu-desk-1.office.domain.com">ubuntu-desk-1.office.domain.com</a>" have its netbios name equal to "ubuntu-d-dae34".</div><div>* "<a href="http://ubuntu-desk-1.sp.domain.com">ubuntu-desk-1.sp.domain.com</a>" have its netbios name equal to "ubuntu-d-fsd5h".<br></div><div><br></div><div>Then:</div><div><br></div><div>sudo apt-get remove realmd</div><div><br></div><div>Write at /etc/hosts:</div><div><br></div><div>172.16.10.10 <a href="http://ubuntu-desk-1.office.domain.com">ubuntu-desk-1.office.domain.com</a> ubuntu-desk-1 ubuntu-d-dae34</div><div><br></div><div>Write at the /etc/samba/smb.conf the following line:</div><div><br></div><div>netbios name = ubuntu-d-dae34</div><div>---</div><div><br></div><div>This way, I can run: "net ads join" that my machine will got 2 "names", first is DNS, heavily used, the second is the NetBIOS (obsolete, used just to join into the domain). NetBIOS is disable in my network, no WINS.</div><div><br></div><div>So, I can have "ubuntu-desk-1" both in "*.<a href="http://office.domain.com">office.domain.com</a>" and "*.<a href="http://sp.domain.com">sp.domain.com</a>", each one with its own netbios name but, same hostname (different domain).</div><div><br></div><div>I came to conclusion that realmd is not ready for large networks.</div><div><br></div><div>Please, let me know when realmd have support for selecting different netbions name. Also, realmd should NOT cut the DNS, at 15 char, before trying to register it. This is ugly, Realmd should not touch DNS hostname, ever.</div><div><br></div><div>Thanks!</div><div>Thiago</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 16 September 2014 02:49, Martinx - ジェームズ <span dir="ltr"><<a href="mailto:thiagocmartinsc@gmail.com" target="_blank">thiagocmartinsc@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hey guys,<div><br></div><div>I'll try to simplify my situation with Realm + SSSD, as follows:</div><div><br></div><div><br></div><div>* While running "realm join"</div><div><br></div><div>1) How can I specify the "NetBIOS Name" ? (equivalent of adcli's "--computer-name");</div><div><br></div><div>2) How can I tell it (realm join) to *not cut* the DNS hostname @ char 15?</div><div><br></div><div><br></div><div>Thanks!</div><div>Thiago</div></div><div class="gmail_extra"><br><div class="gmail_quote"><span class="">On 13 September 2014 02:06, Martinx - ジェームズ <span dir="ltr"><<a href="mailto:thiagocmartinsc@gmail.com" target="_blank">thiagocmartinsc@gmail.com</a>></span> wrote:<br></span><div><div class="h5"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Guys,<div><br></div><div>I'm trying to join a Linux instance into my AD Domain, its FQDN is `<a href="http://puppetmaster-1-i-000000b9.tenant-a.company.com" target="_blank">puppetmaster-1-i-000000b9.tenant-a.company.com</a>`:</div><div><br></div><div>---</div><div><div><font face="courier new, monospace">root@puppetmaster-1:~# hostname puppetmaster-1-i-000000b9</font></div><div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace">root@puppetmaster-1:~# hostname -f</font></div><div><font face="courier new, monospace"><a href="http://puppetmaster-1-i-000000b9.tenant-a.company.com" target="_blank">puppetmaster-1-i-000000b9.tenant-a.company.com</a></font></div></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace">root@puppetmaster-1:~# realm -v join <a href="http://sambadom.company.com" target="_blank">sambadom.company.com</a> -U Administrator</font></div><div><font face="courier new, monospace"> * Resolving: _ldap._<a href="http://tcp.sambadom.company.com" target="_blank">tcp.sambadom.company.com</a></font></div><div><font face="courier new, monospace"> * Performing LDAP DSE lookup on: 192.168.1.10</font></div><div><font face="courier new, monospace"> * Performing LDAP DSE lookup on: 192.168.1.20</font></div><div><font face="courier new, monospace"> * Successfully discovered: <a href="http://sambadom.company.com" target="_blank">sambadom.company.com</a></font></div><div><font face="courier new, monospace">Password for Administrator: </font></div><div><font face="courier new, monospace"> * Unconditionally checking packages</font></div><div><font face="courier new, monospace"> * Resolving required packages</font></div><div><b><font face="courier new, monospace"> * Joining using a truncated netbios name: PUPPETMASTER-1-</font></b></div><div><font face="courier new, monospace"> * LANG=C LOGNAME=root /usr/bin/net -s /var/cache/realmd/realmd-smb-conf.HMC1LX -U Administrator ads join <a href="http://sambadom.company.com" target="_blank">sambadom.company.com</a></font></div><div><font face="courier new, monospace">Enter Administrator's password:DNS update failed: NT_STATUS_INVALID_PARAMETER</font></div><div><font face="courier new, monospace"><br></font></div><div><font face="courier new, monospace">Using short domain name -- SAMBADOM</font></div><div><font face="courier new, monospace">Joined 'PUPPETMASTER-1-' to dns domain '<a href="http://sambadom.company.com" target="_blank">sambadom.company.com</a>'</font></div><div><b><font face="courier new, monospace">No DNS domain configured for puppetmaster-1-. Unable to perform DNS Update.</font></b></div><div><font face="courier new, monospace"> * LANG=C LOGNAME=root /usr/bin/net -s /var/cache/realmd/realmd-smb-conf.HMC1LX -U Administrator ads keytab create</font></div><div><font face="courier new, monospace">Enter Administrator's password:</font></div><div><font face="courier new, monospace"> * /usr/sbin/update-rc.d sssd enable</font></div><div><font face="courier new, monospace">update-rc.d: /etc/init.d/sssd: file does not exist</font></div><div><font face="courier new, monospace"> * /usr/sbin/service sssd restart</font></div><div><font face="courier new, monospace">stop: Unknown instance: </font></div><div><font face="courier new, monospace">sssd start/running, process 6243</font></div><div><font face="courier new, monospace"> * Successfully enrolled machine in realm</font></div></div><div>---</div><div><br></div><div>It joined but the DNS did not got registered...</div><div><br></div><div>If I remove the "$instance-id", from the `hostname`, then, the command `realm -v join ...` works! But, it will break my environment "as-is", I'm expecting: "hostname+instance-id"... :-/</div><div><br></div><div>I'm evaluating the couple "realmd + sssd" to replace Samba + Winbind but, this unique problem is an impediment to start using this solution in production today...</div><div><br></div><div>Any tips?!</div><div><br></div><div>From what I'm seeing, the `realm join` is missing an option like `--computer-name=puppetmaster-1` like the one from `adcli` (and it should not use that truncated "PUPPETMASTER-1-" above), and do not "cut / touch" the DNS hostname.</div><div><br></div><div>When with Winbind+Samba, I can join / register the hostname `puppetmaster-1-i-000000b9` @ `<a href="http://tenant-a.company.com" target="_blank">tenant-a.company.com</a>` without any problem (using `net ad join -U Administrator`) but, Winbind brings lots of others problems, so, I'm trying to move to `sssd` instead...</div><div><br></div><div>I really appreciate any help! I'm using Ubuntu 14.04.1 with my own small PPA archive: <a href="http://launchpad.net/~martinx/+archive/ubuntu/ig" target="_blank">http://launchpad.net/~martinx/+archive/ubuntu/ig</a></div><div><br></div><div>Thanks!</div><div>Thiago</div></div> </blockquote></div></div></div><br></div> </blockquote></div><br></div>