Форум

[QUOTE]Андрей Николаев написал:
Viktor , А у вашего пользователя есть право на ввод ПК в домен?[/QUOTE]
Права есть, по умолчанию до 10 раз можно от 1 учётной записи вводить в домен.
В групповой политике установлено значение по умолчанию.

[CODE]
[/CODE]Приветствую!

Согласно инструкции [URL=https://dev.1c-bitrix.ru/learning/course/index.php?COURSE_ID=37&LESSON_ID=8859&LESSON_PATH=3908.8809.8847.8859]https://dev.1c-bitrix.ru/learning/course/index.php?COURSE_ID=37&LESSON_ID=8859&LESSON_PATH=3908.8809.8847.8859[/URL]
Пользователи успешно выгружаются из AD и отображаются в Битрикс24.
Далее идёт конфигурация веб-сервера для организации SSO - 6. Manage sites in the pool > 7. Configure NTLM auth for all sites.


[CODE]Do you want to change NTLM settings for the server? (N|y): y
NetBIOS Domain/Workgroup Name (ex. TEST): EXAMPLE
NetBIOS Hostname (default srvweb): srvweb
Full Domain Name: (default CORP.EXAMPLE.RU): CORP.EXAMPLE.RU
Domain password server (default dc01.corp.EXAMPLE.ru): dc01.CORP.EXAMPLE.RU
Domain admin user name (default Administrator): adm
Domain admin user password:
NTLM Settings:
------------------------------------------------------------------------------------
NetBIOS Domain      : EXAMPLE
NetBIOS Hostname    : srvweb
Full Domain Name    : CORP.EXAMPLE.RU
Password Server     : dc01.CORP.EXAMPLE.RU
Domain User         : adm
------------------------------------------------------------------------------------
The site and its shared sites will be configured to use NTLM.
Enter the site name (default): m.dev.EXAMPLE.ru
NTLM settings found on the site m.dev.EXAMPLE.ru.
Do you want to change them? (N|y): y
Please confirm you want to enable NTLM (N|y): y
[/CODE]Задача завершается с ошибкой, лог ошибки:[CODE]
PLAY [bitrix-hosts] ************************************************************

TASK [setup] *******************************************************************
ok: [server1]

TASK [web : include variables fr om mysql group] ********************************
ok: [server1]

TASK [web : include variables from web group] **********************************
ok: [server1]

TASK [web : include variables from temporary config] ***************************
ok: [server1]

TASK [web : additional gathering facts] ****************************************
ok: [server1]

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************

TASK [web : include] ***********************************************************
included: /etc/ansible/roles/web/tasks/create_ntlm.yml for server1

TASK [web : gathering facts about installed sites with the same DB] ************
changed: [server1]

TASK [web : create variable bx_sites_info - all sites with the same DB] ********
ok: [server1]

TASK [web : gathering facts about installed kernel site with defined DB] *******
changed: [server1]

TASK [web : create variable bx_kernel_site - installed kernel site with defined DB] ***
ok: [server1]

TASK [web : include] ***********************************************************
included: /etc/ansible/roles/web/tasks/samba_configs.yml for server1

TASK [web : ntlm_pass variable] ************************************************
ok: [server1]

TASK [web : install samba packages Centos7] ************************************
ok: [server1] => (item=[u'samba', u'samba-winbind', u'samba-common', u'samba-client', u'samba-winbind-clients', u'mod_auth_ntlm_winbind'])

TASK [web : remove samba packages on Centos6] **********************************

TASK [web : install samba4 packages on Centos6] ********************************

TASK [web : get current winbind status] ****************************************
ok: [server1]

TASK [web : shutdown smb and winbind service] **********************************
ok: [server1] => (item=winbind)
ok: [server1] => (item=smb)

TASK [web : delete cache files from samba] *************************************
ok: [server1] => (item=serverid.tdb)
ok: [server1] => (item=winbindd_cache.tdb)
ok: [server1] => (item=winbindd_idmap.tdb)
ok: [server1] => (item=winbindd_privileged/pipe)

TASK [web : create samba config] ***********************************************
changed: [server1]

TASK [web : create kerberos config] ********************************************
ok: [server1]

TASK [web : update login sources in /etc/nsswitch.conf] ************************
ok: [server1]

TASK [web : update group sources in /etc/nsswitch.conf] ************************
ok: [server1]

TASK [web : update password sources in /etc/nsswitch.conf] *********************
ok: [server1]

TASK [web : update domain in /etc/resolv.conf - search] ************************
ok: [server1]

TASK [web : update domain in /etc/resolv.conf - domain] ************************
ok: [server1]

TASK [web : add bitrix to wbpriv group] ****************************************
ok: [server1]

TASK [web : generate file name for temporary save admin settings] **************
ok: [server1]

TASK [web : temp directory] ****************************************************
ok: [server1]

TASK [web : save password info to the the file] ********************************
changed: [server1]

TASK [web : join the ADS domain] ***********************************************
fatal: [server1]: FAILED! => {"changed": false, "failed": true, "msg": "Error: net ads join returned error=255"}

NO MORE HOSTS LEFT *************************************************************
       to retry, use: --lim it @/etc/ansible/web.retry

PLAY RECAP *********************************************************************
server1                    : ok=27   changed=4    unreachable=0    failed=1

[/CODE]
Какие могут быть варианты решения?