# Joining Active Directory Error

[https://www.truenas.com/community/threads/joining-active-directory-error.97316/](https://www.truenas.com/community/threads/joining-active-directory-error.97316/)

<article class="message    message-threadStarterPost message--post js-post js-inlineModContainer  " data-author="bartqn4" data-content="post-671884" id="bkmrk-hi-everyone%2Cim-kinda"><div class="message-inner"><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="bartqn4 · Dec 9, 2021 at 10:02 AM" data-lb-id="post-671884"><article class="message-body js-selectToQuote"><div class="bbWrapper">Hi everyone,  
  
Im kinda new to TrueNAS and I'm working on a small proof of concept for school.  
  
I'm stuck with one problem: When I'm trying to join my domain it gives this error:  
<div class="bbImageWrapper  js-lbImage" data-lb-caption-extra-html="" data-lb-sidebar-href="" data-single-image="1" data-src="https://www.truenas.com/community/attachments/1639072925931-png.51383/" title="1639072925931.png">![1639072925931.png](https://www.truenas.com/community/attachments/1639072925931-png.51383/ "1639072925931.png")</div>  
I can ping the domain and the domain controller.  
  
Anyone knows a fix?</div><div class="js-selectToQuoteEnd">  
</div></article></div></div><footer class="message-footer"></footer></div></div></div></article><article class="message   message--post js-post js-inlineModContainer  " data-author="anodos" data-content="post-671891" id="bkmrk-anodos-sambassador-i"><span class="u-anchorTarget" id="bkmrk-"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[![anodos](https://www.truenas.com/community/data/avatars/m/38/38019.jpg?1492183658)](https://www.truenas.com/community/members/anodos.38019/)</div></div>#### [anodos](https://www.truenas.com/community/members/anodos.38019/)

##### Sambassador

<div class="message-userDetails"><div class="userBanner userBanner userBanner--skyBlue message-userBanner" itemprop="jobTitle">**iXsystems**</div></div><div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Mar 6, 2014</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>9,407</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 9, 2021" data-time="1639074999" data-time-string="10:36 AM" datetime="2021-12-09T10:36:39-0800" dir="auto" title="Dec 9, 2021 at 10:36 AM">Dec 9, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671891)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671891)
- [\#2](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671891)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="anodos · Dec 9, 2021 at 10:36 AM" data-lb-id="post-671891"><article class="message-body js-selectToQuote"><div class="bbWrapper">What version is this?</div><div class="js-selectToQuoteEnd">  
</div></article></div><aside class="message-signature"><div class="bbWrapper">[SMB Permissions Overview](https://forums.freenas.org/index.php?threads/methods-for-fine-tuning-samba-permissions.50739/)</div></aside></div><footer class="message-footer"></footer></div></div></div></article><article class="message    message-threadStarterPost message--post js-post js-inlineModContainer  " data-author="bartqn4" data-content="post-671924" id="bkmrk-b-bartqn4-dabbler-jo"><span class="u-anchorTarget" id="bkmrk--3"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[<span aria-label="bartqn4" class="avatar-u112555-m" role="img">B</span>](https://www.truenas.com/community/members/bartqn4.112555/)</div></div>#### [bartqn4](https://www.truenas.com/community/members/bartqn4.112555/)

##### Dabbler

<div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Dec 9, 2021</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>10</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 9, 2021" data-time="1639085200" data-time-string="1:26 PM" datetime="2021-12-09T13:26:40-0800" dir="auto" title="Dec 9, 2021 at 1:26 PM">Dec 9, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671924)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671924)
- [\#3](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671924)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="bartqn4 · Dec 9, 2021 at 1:26 PM" data-lb-id="post-671924"><article class="message-body js-selectToQuote">> <div class="bbCodeBlock-title">[anodos said:](https://www.truenas.com/community/goto/post?id=671891)</div><div class="bbCodeBlock-content"><div class="bbCodeBlock-expandContent js-expandContent ">What version is this?</div></div>

<div class="bbWrapper">12.0</div><div class="js-selectToQuoteEnd">  
</div></article></div></div><footer class="message-footer"></footer></div></div></div></article><article class="message   message-staffPost  message--post js-post js-inlineModContainer  " data-author="Samuel Tai" data-content="post-671925" id="bkmrk-samuel-tai-never-und"><span class="u-anchorTarget" id="bkmrk--5"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[![Samuel Tai](https://www.truenas.com/community/data/avatars/m/101/101891.jpg?1587731709)](https://www.truenas.com/community/members/samuel-tai.101891/)</div></div>#### [<span class="username--staff username--moderator">Samuel Tai</span>](https://www.truenas.com/community/members/samuel-tai.101891/)

##### Never underestimate your own stupidity

<div class="message-userDetails"><div class="userBanner userBanner userBanner--orange message-userBanner" itemprop="jobTitle">**Moderator**</div></div><div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Apr 24, 2020</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>5,357</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 9, 2021" data-time="1639085974" data-time-string="1:39 PM" datetime="2021-12-09T13:39:34-0800" dir="auto" title="Dec 9, 2021 at 1:39 PM">Dec 9, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671925)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671925)
- [\#4](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671925)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="Samuel Tai · Dec 9, 2021 at 1:39 PM" data-lb-id="post-671925"><article class="message-body js-selectToQuote"><div class="bbWrapper">What's the full version? 12.0 doesn't tell us that much.</div><div class="js-selectToQuoteEnd">  
</div></article></div><aside class="message-signature"><div class="bbWrapper"><div class="bbCodeSpoiler"><button class="bbCodeSpoiler-button button--longText button" data-original-title="Click to reveal or hide content" data-xf-click="toggle" data-xf-init="tooltip" id="bkmrk-show-%3A%C2%A013.0-u5.3-bui" type="button"><span class="button-text">Show : <span class="bbCodeSpoiler-button-title">13.0-U5.3 build, running since 9.3 (2015)</span></span></button></div></div></aside></div><footer class="message-footer"></footer></div></div></div></article><article class="message    message-threadStarterPost message--post js-post js-inlineModContainer  " data-author="bartqn4" data-content="post-671926" id="bkmrk-b-bartqn4-dabbler-jo-1"><span class="u-anchorTarget" id="bkmrk--8"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[<span aria-label="bartqn4" class="avatar-u112555-m" role="img">B</span>](https://www.truenas.com/community/members/bartqn4.112555/)</div></div>#### [bartqn4](https://www.truenas.com/community/members/bartqn4.112555/)

##### Dabbler

<div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Dec 9, 2021</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>10</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 9, 2021" data-time="1639086532" data-time-string="1:48 PM" datetime="2021-12-09T13:48:52-0800" dir="auto" title="Dec 9, 2021 at 1:48 PM">Dec 9, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671926)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671926)
- [\#5](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671926)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="bartqn4 · Dec 9, 2021 at 1:48 PM" data-lb-id="post-671926"><article class="message-body js-selectToQuote">> <div class="bbCodeBlock-title">[Samuel Tai said:](https://www.truenas.com/community/goto/post?id=671925)</div><div class="bbCodeBlock-content"><div class="bbCodeBlock-expandContent js-expandContent ">What's the full version? 12.0 doesn't tell us that much.</div></div>

<div class="bbWrapper">CORE 12.0  
Is that the full version name?</div><div class="js-selectToQuoteEnd">  
</div></article></div></div><footer class="message-footer"></footer></div></div></div></article><article class="message   message-staffPost  message--post js-post js-inlineModContainer  " data-author="Samuel Tai" data-content="post-671928" id="bkmrk-samuel-tai-never-und-1"><span class="u-anchorTarget" id="bkmrk--10"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[![Samuel Tai](https://www.truenas.com/community/data/avatars/m/101/101891.jpg?1587731709)](https://www.truenas.com/community/members/samuel-tai.101891/)</div></div>#### [<span class="username--staff username--moderator">Samuel Tai</span>](https://www.truenas.com/community/members/samuel-tai.101891/)

##### Never underestimate your own stupidity

<div class="message-userDetails"><div class="userBanner userBanner userBanner--orange message-userBanner" itemprop="jobTitle">**Moderator**</div></div><div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Apr 24, 2020</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>5,357</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 9, 2021" data-time="1639087889" data-time-string="2:11 PM" datetime="2021-12-09T14:11:29-0800" dir="auto" title="Dec 9, 2021 at 2:11 PM">Dec 9, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671928)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671928)
- [\#6](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671928)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="Samuel Tai · Dec 9, 2021 at 2:11 PM" data-lb-id="post-671928"><article class="message-body js-selectToQuote">> <div class="bbCodeBlock-title">[bartqn4 said:](https://www.truenas.com/community/goto/post?id=671926)</div><div class="bbCodeBlock-content"><div class="bbCodeBlock-expandContent js-expandContent ">CORE 12.0  
> Is that the full version name?</div></div>

<div class="bbWrapper">What does the version show in System Information widget in the Dashboard? We're looking for something like 12.0-U7.</div><div class="js-selectToQuoteEnd">  
</div></article></div><aside class="message-signature"><div class="bbWrapper"><div class="bbCodeSpoiler"><button class="bbCodeSpoiler-button button--longText button" data-original-title="Click to reveal or hide content" data-xf-click="toggle" data-xf-init="tooltip" id="bkmrk-show-%3A%C2%A013.0-u5.3-bui-1" type="button"><span class="button-text">Show : <span class="bbCodeSpoiler-button-title">13.0-U5.3 build, running since 9.3 (2015)</span></span></button></div></div></aside></div><footer class="message-footer"></footer></div></div></div></article><article class="message    message-threadStarterPost message--post js-post js-inlineModContainer  " data-author="bartqn4" data-content="post-671939" id="bkmrk-b-bartqn4-dabbler-jo-2"><span class="u-anchorTarget" id="bkmrk--13"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[<span aria-label="bartqn4" class="avatar-u112555-m" role="img">B</span>](https://www.truenas.com/community/members/bartqn4.112555/)</div></div>#### [bartqn4](https://www.truenas.com/community/members/bartqn4.112555/)

##### Dabbler

<div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Dec 9, 2021</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>10</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 9, 2021" data-time="1639090997" data-time-string="3:03 PM" datetime="2021-12-09T15:03:17-0800" dir="auto" title="Dec 9, 2021 at 3:03 PM">Dec 9, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671939)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671939)
- [\#7](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671939)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="bartqn4 · Dec 9, 2021 at 3:03 PM" data-lb-id="post-671939"><article class="message-body js-selectToQuote">> <div class="bbCodeBlock-title">[Samuel Tai said:](https://www.truenas.com/community/goto/post?id=671928)</div><div class="bbCodeBlock-content"><div class="bbCodeBlock-expandContent js-expandContent ">What does the version show in System Information widget in the Dashboard? We're looking for something like 12.0-U7.</div></div>

<div class="bbWrapper">12.0-U5</div><div class="js-selectToQuoteEnd">  
</div></article></div></div><footer class="message-footer"></footer></div></div></div></article><article class="message   message-staffPost  message--post js-post js-inlineModContainer  " data-author="Samuel Tai" data-content="post-671947" id="bkmrk-samuel-tai-never-und-2"><span class="u-anchorTarget" id="bkmrk--15"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[![Samuel Tai](https://www.truenas.com/community/data/avatars/m/101/101891.jpg?1587731709)](https://www.truenas.com/community/members/samuel-tai.101891/)</div></div>#### [<span class="username--staff username--moderator">Samuel Tai</span>](https://www.truenas.com/community/members/samuel-tai.101891/)

##### Never underestimate your own stupidity

<div class="message-userDetails"><div class="userBanner userBanner userBanner--orange message-userBanner" itemprop="jobTitle">**Moderator**</div></div><div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Apr 24, 2020</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>5,357</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 9, 2021" data-time="1639096681" data-time-string="4:38 PM" datetime="2021-12-09T16:38:01-0800" dir="auto" title="Dec 9, 2021 at 4:38 PM">Dec 9, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671947)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671947)
- [\#8](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671947)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="Samuel Tai · Dec 9, 2021 at 4:38 PM" data-lb-id="post-671947"><article class="message-body js-selectToQuote"><div class="bbWrapper">For the domain account name, try just the account without the domain in front. It's probably prepending the domain in front of your domain\account, so of course there won't be an account matching domain\domain\account.</div><div class="js-selectToQuoteEnd">  
</div></article></div><aside class="message-signature"><div class="bbWrapper"><div class="bbCodeSpoiler"><button class="bbCodeSpoiler-button button--longText button" data-original-title="Click to reveal or hide content" data-xf-click="toggle" data-xf-init="tooltip" id="bkmrk-show-%3A%C2%A013.0-u5.3-bui-2" type="button"><span class="button-text">Show : <span class="bbCodeSpoiler-button-title">13.0-U5.3 build, running since 9.3 (2015)</span></span></button></div></div></aside></div><footer class="message-footer"></footer></div></div></div></article><article class="message   message--post js-post js-inlineModContainer  " data-author="anodos" data-content="post-671948" id="bkmrk-anodos-sambassador-i-1"><span class="u-anchorTarget" id="bkmrk--18"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[![anodos](https://www.truenas.com/community/data/avatars/m/38/38019.jpg?1492183658)](https://www.truenas.com/community/members/anodos.38019/)</div></div>#### [anodos](https://www.truenas.com/community/members/anodos.38019/)

##### Sambassador

<div class="message-userDetails"><div class="userBanner userBanner userBanner--skyBlue message-userBanner" itemprop="jobTitle">**iXsystems**</div></div><div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Mar 6, 2014</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>9,407</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 9, 2021" data-time="1639097837" data-time-string="4:57 PM" datetime="2021-12-09T16:57:17-0800" dir="auto" title="Dec 9, 2021 at 4:57 PM">Dec 9, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671948)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671948)
- [\#9](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671948)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="anodos · Dec 9, 2021 at 4:57 PM" data-lb-id="post-671948"><article class="message-body js-selectToQuote">> <div class="bbCodeBlock-content"><div class="bbCodeBlock-expandContent js-expandContent ">12.0-U5</div></div>

<div class="bbWrapper">update to U7, there is a critical winbindd security vulnerability in U5, otherwise Samuel Tai is right. Later versions also have better error reporting.</div><div class="js-selectToQuoteEnd">  
</div></article></div><aside class="message-signature"><div class="bbWrapper">[SMB Permissions Overview](https://forums.freenas.org/index.php?threads/methods-for-fine-tuning-samba-permissions.50739/)</div></aside></div><footer class="message-footer"></footer></div></div></div></article><article class="message    message-threadStarterPost message--post js-post js-inlineModContainer  " data-author="bartqn4" data-content="post-671967" id="bkmrk-b-bartqn4-dabbler-jo-3"><span class="u-anchorTarget" id="bkmrk--21"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[<span aria-label="bartqn4" class="avatar-u112555-m" role="img">B</span>](https://www.truenas.com/community/members/bartqn4.112555/)</div></div>#### [bartqn4](https://www.truenas.com/community/members/bartqn4.112555/)

##### Dabbler

<div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Dec 9, 2021</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>10</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 9, 2021" data-time="1639118557" data-time-string="10:42 PM" datetime="2021-12-09T22:42:37-0800" dir="auto" title="Dec 9, 2021 at 10:42 PM">Dec 9, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671967)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671967)
- [\#10](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671967)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="bartqn4 · Dec 9, 2021 at 10:42 PM" data-lb-id="post-671967"><article class="message-body js-selectToQuote">> <div class="bbCodeBlock-title">[Samuel Tai said:](https://www.truenas.com/community/goto/post?id=671947)</div><div class="bbCodeBlock-content"><div class="bbCodeBlock-expandContent js-expandContent ">For the domain account name, try just the account without the domain in front. It's probably prepending the domain in front of your domain\account, so of course there won't be an account matching domain\domain\account.</div></div>

<div class="bbWrapper">I tried that already, didn't work</div><div class="js-selectToQuoteEnd">  
</div></article></div></div><footer class="message-footer"></footer></div></div></div></article><article class="message    message-threadStarterPost message--post js-post js-inlineModContainer  " data-author="bartqn4" data-content="post-671993" id="bkmrk-b-bartqn4-dabbler-jo-4"><span class="u-anchorTarget" id="bkmrk--23"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[<span aria-label="bartqn4" class="avatar-u112555-m" role="img">B</span>](https://www.truenas.com/community/members/bartqn4.112555/)</div></div>#### [bartqn4](https://www.truenas.com/community/members/bartqn4.112555/)

##### Dabbler

<div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Dec 9, 2021</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>10</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 10, 2021" data-time="1639133546" data-time-string="2:52 AM" datetime="2021-12-10T02:52:26-0800" dir="auto" title="Dec 10, 2021 at 2:52 AM">Dec 10, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671993)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671993)
- [\#11](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-671993)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="bartqn4 · Dec 10, 2021 at 2:52 AM" data-lb-id="post-671993"><article class="message-body js-selectToQuote">> <div class="bbCodeBlock-title">[anodos said:](https://www.truenas.com/community/goto/post?id=671948)</div><div class="bbCodeBlock-content"><div class="bbCodeBlock-expandContent js-expandContent ">update to U7, there is a critical winbindd security vulnerability in U5, otherwise Samuel Tai is right. Later versions also have better error reporting.</div></div>

<div class="bbWrapper">Did this, same error. Should be something with the domain account then right?</div><div class="js-selectToQuoteEnd">  
</div></article></div></div><footer class="message-footer"></footer></div></div></div></article><article class="message   message-staffPost  message--post js-post js-inlineModContainer  " data-author="Samuel Tai" data-content="post-672005" id="bkmrk-samuel-tai-never-und-3"><span class="u-anchorTarget" id="bkmrk--25"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[![Samuel Tai](https://www.truenas.com/community/data/avatars/m/101/101891.jpg?1587731709)](https://www.truenas.com/community/members/samuel-tai.101891/)</div></div>#### [<span class="username--staff username--moderator">Samuel Tai</span>](https://www.truenas.com/community/members/samuel-tai.101891/)

##### Never underestimate your own stupidity

<div class="message-userDetails"><div class="userBanner userBanner userBanner--orange message-userBanner" itemprop="jobTitle">**Moderator**</div></div><div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Apr 24, 2020</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>5,357</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 10, 2021" data-time="1639138297" data-time-string="4:11 AM" datetime="2021-12-10T04:11:37-0800" dir="auto" title="Dec 10, 2021 at 4:11 AM">Dec 10, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672005)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672005)
- [\#12](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672005)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="Samuel Tai · Dec 10, 2021 at 4:11 AM" data-lb-id="post-672005"><article class="message-body js-selectToQuote"><div class="bbWrapper">Are you leaving the \ in front of the account?</div><div class="js-selectToQuoteEnd">  
</div></article></div><aside class="message-signature"><div class="bbWrapper"><div class="bbCodeSpoiler"><button class="bbCodeSpoiler-button button--longText button" data-original-title="Click to reveal or hide content" data-xf-click="toggle" data-xf-init="tooltip" id="bkmrk-show-%3A%C2%A013.0-u5.3-bui-3" type="button"><span class="button-text">Show : <span class="bbCodeSpoiler-button-title">13.0-U5.3 build, running since 9.3 (2015)</span></span></button></div></div></aside></div><footer class="message-footer"></footer></div></div></div></article><article class="message    message-threadStarterPost message--post js-post js-inlineModContainer  " data-author="bartqn4" data-content="post-672012" id="bkmrk-b-bartqn4-dabbler-jo-5"><span class="u-anchorTarget" id="bkmrk--28"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[<span aria-label="bartqn4" class="avatar-u112555-m" role="img">B</span>](https://www.truenas.com/community/members/bartqn4.112555/)</div></div>#### [bartqn4](https://www.truenas.com/community/members/bartqn4.112555/)

##### Dabbler

<div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Dec 9, 2021</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>10</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 10, 2021" data-time="1639139573" data-time-string="4:32 AM" datetime="2021-12-10T04:32:53-0800" dir="auto" title="Dec 10, 2021 at 4:32 AM">Dec 10, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672012)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672012)
- [\#13](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672012)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="bartqn4 · Dec 10, 2021 at 4:32 AM" data-lb-id="post-672012"><article class="message-body js-selectToQuote">> <div class="bbCodeBlock-title">[Samuel Tai said:](https://www.truenas.com/community/goto/post?id=672005)</div><div class="bbCodeBlock-content"><div class="bbCodeBlock-expandContent js-expandContent ">Are you leaving the \ in front of the account?</div></div>

<div class="bbWrapper">Both not working, so DOMAIN\Administrator and Administrator not working</div><div class="js-selectToQuoteEnd">  
</div></article></div></div><footer class="message-footer"></footer></div></div></div></article><article class="message   message-staffPost  message--post js-post js-inlineModContainer  " data-author="Samuel Tai" data-content="post-672035" id="bkmrk-samuel-tai-never-und-4"><span class="u-anchorTarget" id="bkmrk--30"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[![Samuel Tai](https://www.truenas.com/community/data/avatars/m/101/101891.jpg?1587731709)](https://www.truenas.com/community/members/samuel-tai.101891/)</div></div>#### [<span class="username--staff username--moderator">Samuel Tai</span>](https://www.truenas.com/community/members/samuel-tai.101891/)

##### Never underestimate your own stupidity

<div class="message-userDetails"><div class="userBanner userBanner userBanner--orange message-userBanner" itemprop="jobTitle">**Moderator**</div></div><div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Apr 24, 2020</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>5,357</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 10, 2021" data-time="1639146345" data-time-string="6:25 AM" datetime="2021-12-10T06:25:45-0800" dir="auto" title="Dec 10, 2021 at 6:25 AM">Dec 10, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672035)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672035)
- [\#14](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672035)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="Samuel Tai · Dec 10, 2021 at 6:25 AM" data-lb-id="post-672035"><article class="message-body js-selectToQuote"><div class="bbWrapper">How is your domain set up? This smells like password authentication for Administrator has been disabled.  
  
Also, have you looked at the manual? [https://www.truenas.com/docs/core/directoryservices/activedirectory/](https://www.truenas.com/docs/core/directoryservices/activedirectory/)  
  
You've already stated DNS is working. How about NTP? Are you sync'ed to the DC? Are you using the NetBIOS domain or the DNS domain for your forest?</div><div class="js-selectToQuoteEnd">  
</div></article></div><aside class="message-signature"><div class="bbWrapper"><div class="bbCodeSpoiler"><button class="bbCodeSpoiler-button button--longText button" data-original-title="Click to reveal or hide content" data-xf-click="toggle" data-xf-init="tooltip" id="bkmrk-show-%3A%C2%A013.0-u5.3-bui-4" type="button"><span class="button-text">Show : <span class="bbCodeSpoiler-button-title">13.0-U5.3 build, running since 9.3 (2015)</span></span></button></div></div></aside></div><footer class="message-footer"></footer></div></div></div></article><article class="message    message-threadStarterPost message--post js-post js-inlineModContainer  " data-author="bartqn4" data-content="post-672040" id="bkmrk-b-bartqn4-dabbler-jo-6"><span class="u-anchorTarget" id="bkmrk--33"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[<span aria-label="bartqn4" class="avatar-u112555-m" role="img">B</span>](https://www.truenas.com/community/members/bartqn4.112555/)</div></div>#### [bartqn4](https://www.truenas.com/community/members/bartqn4.112555/)

##### Dabbler

<div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Dec 9, 2021</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>10</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 10, 2021" data-time="1639148176" data-time-string="6:56 AM" datetime="2021-12-10T06:56:16-0800" dir="auto" title="Dec 10, 2021 at 6:56 AM">Dec 10, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672040)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672040)
- [\#15](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672040)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="bartqn4 · Dec 10, 2021 at 6:56 AM" data-lb-id="post-672040"><article class="message-body js-selectToQuote">> <div class="bbCodeBlock-title">[Samuel Tai said:](https://www.truenas.com/community/goto/post?id=672035)</div><div class="bbCodeBlock-content"><div class="bbCodeBlock-expandContent js-expandContent ">How is your domain set up? This smells like password authentication for Administrator has been disabled.  
>   
> Also, have you looked at the manual? [https://www.truenas.com/docs/core/directoryservices/activedirectory/](https://www.truenas.com/docs/core/directoryservices/activedirectory/)  
>   
> You've already stated DNS is working. How about NTP? Are you sync'ed to the DC? Are you using the NetBIOS domain or the DNS domain for your forest?</div></div>

<div class="bbWrapper">Yes, NTP is enabled. I think I'm using the DNS domain.  
How do I check password authentication option?</div><div class="js-selectToQuoteEnd">  
</div></article></div></div><footer class="message-footer"></footer></div></div></div></article><article class="message   message--post js-post js-inlineModContainer  " data-author="anodos" data-content="post-672077" id="bkmrk-anodos-sambassador-i-2"><span class="u-anchorTarget" id="bkmrk--35"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[![anodos](https://www.truenas.com/community/data/avatars/m/38/38019.jpg?1492183658)](https://www.truenas.com/community/members/anodos.38019/)</div></div>#### [anodos](https://www.truenas.com/community/members/anodos.38019/)

##### Sambassador

<div class="message-userDetails"><div class="userBanner userBanner userBanner--skyBlue message-userBanner" itemprop="jobTitle">**iXsystems**</div></div><div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Mar 6, 2014</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>9,407</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 10, 2021" data-time="1639154463" data-time-string="8:41 AM" datetime="2021-12-10T08:41:03-0800" dir="auto" title="Dec 10, 2021 at 8:41 AM">Dec 10, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672077)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672077)
- [\#16](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672077)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="anodos · Dec 10, 2021 at 8:41 AM" data-lb-id="post-672077"><article class="message-body js-selectToQuote"><div class="bbWrapper">The particular place you're failing at is when we try to kinit to get a kerberos ticket. You can try to kinit from CLI by running command `kinit administrator@fqdn`. It might give more useful information.</div><div class="js-selectToQuoteEnd">  
</div></article></div><aside class="message-signature"><div class="bbWrapper">[SMB Permissions Overview](https://forums.freenas.org/index.php?threads/methods-for-fine-tuning-samba-permissions.50739/)</div></aside></div><footer class="message-footer"></footer></div></div></div></article><article class="message    message-threadStarterPost message--post js-post js-inlineModContainer  " data-author="bartqn4" data-content="post-672086" id="bkmrk-b-bartqn4-dabbler-jo-7"><span class="u-anchorTarget" id="bkmrk--38"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[<span aria-label="bartqn4" class="avatar-u112555-m" role="img">B</span>](https://www.truenas.com/community/members/bartqn4.112555/)</div></div>#### [bartqn4](https://www.truenas.com/community/members/bartqn4.112555/)

##### Dabbler

<div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Dec 9, 2021</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>10</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 10, 2021" data-time="1639159036" data-time-string="9:57 AM" datetime="2021-12-10T09:57:16-0800" dir="auto" title="Dec 10, 2021 at 9:57 AM">Dec 10, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672086)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672086)
- [\#17](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672086)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="bartqn4 · Dec 10, 2021 at 9:57 AM" data-lb-id="post-672086"><article class="message-body js-selectToQuote">> <div class="bbCodeBlock-title">[anodos said:](https://www.truenas.com/community/goto/post?id=672077)</div><div class="bbCodeBlock-content"><div class="bbCodeBlock-expandContent js-expandContent ">The particular place you're failing at is when we try to kinit to get a kerberos ticket. You can try to kinit from CLI by running command `kinit administrator@fqdn`. It might give more useful information.</div></div>

<div class="bbWrapper"><div class="bbImageWrapper  js-lbImage" data-lb-caption-extra-html="" data-lb-sidebar-href="" data-single-image="1" data-src="https://www.truenas.com/community/attachments/1639158951576-png.51398/" title="1639158951576.png">![1639158951576.png](https://www.truenas.com/community/attachments/1639158951576-png.51398/ "1639158951576.png")</div>  
I haven't set up Kerberos or anything tho, should I do that? Kinda new to this stuff.</div><div class="js-selectToQuoteEnd">  
</div></article></div></div><footer class="message-footer"></footer></div></div></div></article><article class="message   message-staffPost  message--post js-post js-inlineModContainer  " data-author="Samuel Tai" data-content="post-672088" id="bkmrk-samuel-tai-never-und-5"><span class="u-anchorTarget" id="bkmrk--40"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[![Samuel Tai](https://www.truenas.com/community/data/avatars/m/101/101891.jpg?1587731709)](https://www.truenas.com/community/members/samuel-tai.101891/)</div></div>#### [<span class="username--staff username--moderator">Samuel Tai</span>](https://www.truenas.com/community/members/samuel-tai.101891/)

##### Never underestimate your own stupidity

<div class="message-userDetails"><div class="userBanner userBanner userBanner--orange message-userBanner" itemprop="jobTitle">**Moderator**</div></div><div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Apr 24, 2020</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>5,357</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 10, 2021" data-time="1639159459" data-time-string="10:04 AM" datetime="2021-12-10T10:04:19-0800" dir="auto" title="Dec 10, 2021 at 10:04 AM">Dec 10, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672088)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672088)
- [\#18](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672088)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="Samuel Tai · Dec 10, 2021 at 10:04 AM" data-lb-id="post-672088"><article class="message-body js-selectToQuote"><div class="bbWrapper">AD *requires* Kerberos. No wonder it's not working. You're just trying to join an ordinary domain.</div><div class="js-selectToQuoteEnd">  
</div></article></div><aside class="message-signature"><div class="bbWrapper"><div class="bbCodeSpoiler"><button class="bbCodeSpoiler-button button--longText button" data-original-title="Click to reveal or hide content" data-xf-click="toggle" data-xf-init="tooltip" id="bkmrk-show-%3A%C2%A013.0-u5.3-bui-5" type="button"><span class="button-text">Show : <span class="bbCodeSpoiler-button-title">13.0-U5.3 build, running since 9.3 (2015)</span></span></button></div></div></aside></div><footer class="message-footer"></footer></div></div></div></article><article class="message    message-threadStarterPost message--post js-post js-inlineModContainer  " data-author="bartqn4" data-content="post-672090" id="bkmrk-b-bartqn4-dabbler-jo-8"><span class="u-anchorTarget" id="bkmrk--43"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[<span aria-label="bartqn4" class="avatar-u112555-m" role="img">B</span>](https://www.truenas.com/community/members/bartqn4.112555/)</div></div>#### [bartqn4](https://www.truenas.com/community/members/bartqn4.112555/)

##### Dabbler

<div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Dec 9, 2021</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>10</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 10, 2021" data-time="1639159740" data-time-string="10:09 AM" datetime="2021-12-10T10:09:00-0800" dir="auto" title="Dec 10, 2021 at 10:09 AM">Dec 10, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672090)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672090)
- [\#19](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672090)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="bartqn4 · Dec 10, 2021 at 10:09 AM" data-lb-id="post-672090"><article class="message-body js-selectToQuote">> <div class="bbCodeBlock-title">[Samuel Tai said:](https://www.truenas.com/community/goto/post?id=672088)</div><div class="bbCodeBlock-content"><div class="bbCodeBlock-expandContent js-expandContent ">AD *requires* Kerberos. No wonder it's not working. You're just trying to join an ordinary domain.</div></div>

<div class="bbWrapper">Thanks! Will try that tomorrow</div><div class="js-selectToQuoteEnd">  
</div></article></div></div><footer class="message-footer"></footer></div></div></div></article><article class="message   message--post js-post js-inlineModContainer  " data-author="anodos" data-content="post-672096" id="bkmrk-anodos-sambassador-i-3"><span class="u-anchorTarget" id="bkmrk--45"></span><div class="message-inner"><div class="message-cell message-cell--user"><section class="message-user"><div class="message-avatar "><div class="message-avatar-wrapper">[![anodos](https://www.truenas.com/community/data/avatars/m/38/38019.jpg?1492183658)](https://www.truenas.com/community/members/anodos.38019/)</div></div>#### [anodos](https://www.truenas.com/community/members/anodos.38019/)

##### Sambassador

<div class="message-userDetails"><div class="userBanner userBanner userBanner--skyBlue message-userBanner" itemprop="jobTitle">**iXsystems**</div></div><div class="message-userExtras"><dl class="pairs pairs--justified"><dt>Joined</dt><dd>Mar 6, 2014</dd></dl><dl class="pairs pairs--justified"><dt>Messages</dt><dd>9,407</dd></dl></div></section></div><div class="message-cell message-cell--main"><div class="message-main js-quickEditTarget"><header class="message-attribution message-attribution--split">- [<time class="u-dt" data-date-string="Dec 10, 2021" data-time="1639161976" data-time-string="10:46 AM" datetime="2021-12-10T10:46:16-0800" dir="auto" title="Dec 10, 2021 at 10:46 AM">Dec 10, 2021</time>](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672096)

- [](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672096)
- [\#20](https://www.truenas.com/community/threads/joining-active-directory-error.97316/post-672096)

</header><div class="message-content js-messageContent"><div class="message-userContent lbContainer js-lbContainer " data-lb-caption-desc="anodos · Dec 10, 2021 at 10:46 AM" data-lb-id="post-672096"><article class="message-body js-selectToQuote">> <div class="bbCodeBlock-content"><div class="bbCodeBlock-expandContent js-expandContent ">AD *requires* Kerberos. No wonder it's not working. You're just trying to join an ordinary domain.</div></div>

<div class="bbWrapper">  
In theory if you have properly-functioning DNS, the OS kerberos client should allow you to kinit if you specify the FQDN. This probably indicates a DNS issue. Perhaps relevant SRV records for kerberos are not able to be queried through the configured nameservers.</div><div class="js-selectToQuoteEnd">  
</div></article></div><aside class="message-signature"><div class="bbWrapper">[SMB Permissions Overview](https://forums.freenas.org/index.php?threads/methods-for-fine-tuning-samba-permissions.50739/)</div></aside></div></div></div></div></article>