Environment
Novell Open Enterprise Server 11 (OES11)
Domain Services for Windows
DSFW
Situation
Provisioning Wizard fails in "Provisioning PreCheck" task
The /var/opt/novell/xad/log/provisioning.log shows the following:
2012-04-18 08:09:48,339 INFO - Precheck:Starting Health Check...
2012-04-18 08:09:48,339 INFO - Precheck:Script to be run is /opt/novell/xad/share/dcinit/provision/provision_precheck.pl
2012-04-18 08:09:50 Excuting /opt/novell/xad/share/dcinit/ndsConfigServerContext.sh --add-dc 'novell.com' 'CN=Administrator,CN=Users,o=novell' dsfw-s2.novell.com
LDAP Based utility [ndsConfigServerContext.sh] to retrieve server context for YaST
DomainName : novell.com
NdsAdminName : CN=Administrator,CN=Users,o=novell
ExistingServerIP : dsfw-s2.novell.com
ExistingServerPort: 0
Add_DC : true
Returning server context->ou=OESSystemObjects.o=novell
>>>Starting the health check
Use of uninitialized value $ldap_search_flags in concatenation (.) or string at /opt/novell/xad/lib64/perl/util.pm line 784.
Use of uninitialized value $ldap_search_flags in concatenation (.) or string at /opt/novell/xad/lib64/perl/util.pm line 784.
Use of uninitialized value $ldap_search_flags in concatenation (.) or string at /opt/novell/xad/lib64/perl/util.pm line 784.
Failed to run the pre install health check [104] at /opt/novell/xad/share/dcinit/provision/provision_precheck.pl line 38.
2012-04-18 08:10:07,349 INFO - Precheck:Healthcheck returned.
The /var/opt/novell/xad/log/healthcheck.log shows the following:
[08:09:50, Wed Apr 18, 2012, 2]: Successfully health checked the kerberos service.
[08:09:50, Wed Apr 18, 2012, 5]: The kinit for rpcclient : principal ['Administrator'@NOVELL.COM]
[08:09:50, Wed Apr 18, 2012, 4]: Sucessfully got the kerberos ticket
[08:09:50, Wed Apr 18, 2012, 5]: Got the kerberos ticket for domain ['Administrator'@NOVELL.COM]
[08:10:07, Wed Apr 18, 2012, 1]: Failed, the output is [ads_krb5_get_fwd_ticket: krb5_fwd_tgt_creds failed (KDC can't fulfill requested option)]
[08:10:07, Wed Apr 18, 2012, 1]: RPC and Samba Service health check failed : ads_krb5_get_fwd_ticket: krb5_fwd_tgt_creds failed (KDC can't fulfill requested option): 256
[08:10:07, Wed Apr 18, 2012, 0]: The remote server health check failed <104>
[08:10:07, Wed Apr 18, 2012, 0]: The health check failed. <104>
Resolution
No server listed as the Operations Master for RID, PDC, or Infrastructure.
With the Active Directory Users and Computers tool or snapin in MMC, right click on the domain and select "Connect to Domain Controller"
Select the domain controller to be the Operations Master.
Click "OK"
With the Active Directory Users and Computers tool or snapin in MMC, right click on the domain and select "Operations Masters..."
Click on "Change..." to set the Operations Master
Start with selecting the RID tab.
Click "Yes" in the popup which states "Are you sure you want to transfer the operations master role?"
Click "OK" in the popup which states "The operations master role was successfully transferred."
Do the same for the PDC and Infrastructure roles.
Re-run the provisioning wizard again and finish the provisioning of the DSfW server.