linuxactive-directorykerberossssd

realm: Couldn't join realm: Insufficient permissions to join the domain example.local


I was able to join all other centos linux instance but not this one even though I have AD admin access, still I am getting this error

Failed to join domain: Failed to set account flags for machine account (NT_STATUS_ACCESS_DENIED)

! Insufficient permissions to join the domain example.local realm: Couldn't join realm: Insufficient permissions to join the domain example.local


sudo kinit -V user@example.LOCAL ||| Successfully Authenticated to krb5


sudo realm join -U user@example.LOCAL example.LOCAL | Refer to the error mentioned above on the post


Solution

  • Adding rdns=false under the [libdefaults] section in the /etc/krb5.conf file fixed the issue for me.

    Example:

    [libdefaults]
    default_realm = DOMAIN.COM
    rdns = false