EFW Support

Support => General Support => Topic started by: jamerson on Tuesday 14 May 2013, 03:50:43 am



Title: Failed to add EFW 2.5.1 to Domain
Post by: jamerson on Tuesday 14 May 2013, 03:50:43 am
Dear all,
i tried to add the EFW to the domain controller but i am still getting failed to join!
can someone advise how to do it ?
i found the below steps on the forum but they didn't help !

Quote
EFW probably can do internal DNS well.
Go to Proxy->DNS->DNS Routing, and add there the DNS for your domains. If your domain is .local, create two DNS masqs, one for .local and one for  (without .local)

Then go to Proxy->HTTP->Authentication.
Use "Windows Active Directory Authentication"
On "Authentication Realm *" and "Domainname of AD server *" put the full name of your domain .local.
On "PDC hostname of AD server * " put the name of your domain controller, without domain name. E.g. if your DC is myDC..local, put the name myDC
On BDC, your secondary DC. Save all.

Then go to "AD join" tab.

the error i am still getting is Failed to join domain: failed to find DC for domain ENS.LAN


Title: Re: Failed to add EFW 2.5.1 to Domain
Post by: sree on Tuesday 14 May 2013, 04:19:08 pm
If you doing from GUI it will not get updated to the config files.

Login to firewall through putty and edit /etc/samba/smb.conf make the changes and reboot it works for me.


Cheers~
Sree


Title: Re: Failed to add EFW 2.5.1 to Domain
Post by: jamerson on Tuesday 14 May 2013, 06:33:10 pm
i did this and it didn't works!
which changes i am supposed to do ?
i;ve changed the winbind but no vail !
this my winbind

Code:
[global]
security = ADS
password server = DC
realm = Richter.lan

# handle logging
syslog only = Yes
log level = 0 winbind:2
syslog = 1
max log size = 1000

local master = no
hosts allow = 192.168.0.15/24
interfaces = br0
bind interfaces only = yes
preferred master = no
dns proxy = no
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

workgroup = Richter.Lan = 10000-20000
winbind gid = 10000-20000
winbind use default domain = Yes
winbind separator = +
unix charset = UTF8

ntlm auth = Yes
min protocol = NT1
client NTLMv2 auth = Yes
lm announce = No


My domain controller name is DC
my Domain is Richter. Lan
my DC ip is 192.168.0.16
Os version is Server 2012