Joining a Solaris machine to AD

This is a simple post providing instructions on how to join a solaris system to AD.

  1. Create configuration file (/etc/samba/krb-samba.conf):
    # cat >/etc/samba/krb-samba.conf >>_EOT_
       workgroup = TEST
       password server =
       realm = ad.church1e.test
       security = ads
       kerberos method = system keytab
  2. Join the domain
    root@sol11# net ads join --configfile /etc/samba/krb-samba.conf -U mchurchi
    Enter mchurchi's password:
    Using short domain name -- TEST
    Joined 'sol11' to dns domain 'ad.church1e.test'
    No DNS domain configured for sol11. Unable to perform DNS Update.
    NOTE: The DNS error is normal and can safely be ignored.


If you receive the following error:

Failed to join domain: failed to lookup DC info for domain 'AD.CHURCH1E.TEST' over rpc: The attempted logon is invalid. This is either due to a bad username or authentication information.

Based on the Oracle Doc (Samba 'net ads join' Fails After Upgrade to Samba 4.4.x - Doc ID 2301495.1), we can simply add the following to the samba configuration file:

include system krb5 conf = no