Hi ;
Thanks for your help, I have resolved the issue by adding client to domain manually.
Also please find the following command output or result of adjoin command. But still I have a one quick question, when I installed agnet via DirectManager console then why it was not added to domain only on this server and how it was added to other server and I did not get any error during deployment steps.
a) Are you running Express or commercial? (Express)
Answer: Yes I am using Express version.
b) What is the Operating System and version (e.g. Red Hat Enterprise Linux 7.2)
Answer : I am on centos 6 OS.
c) What is the version of Centrify you're running (you can run the "adinfo -v" command to see this). The current supported community version is 5.4.x
Answer: I am using adinfo (CentrifyDC 5.4.0-286).
[root@m2 ~]# adjoin -w -u saurkuma -V ad.com
saurkuma@AD.COM's password:
Options
-------
Precreate: no
Compatible with 2.x/3.x: no
Enable Apple Scheme to generate UID/GID: no
domain: ad.com
user: saurkuma@AD.COM
container: null
computer name: m2
Pre-Windows 2000 name: m2
DNS Host Name used for dNSHostName attr: null
zone: Auto Zone
server: null
zoneserver: null
gc: null
upn: null
noconf: no
set time: yes
force: no
forceDeleteObj: no
trust: no
des: no
self-serve: no
use ldap to create computer object: no
license type: null
Setting time
Using settings from previous join (under previous dir) to same domain
Initializing domain settings file to ad.com
Attempting bind to ad.com(site:) as saurkuma@AD.COM on any server
Using domain controller: adserver.ad.com writable=true
Initializing forest settings file to AD.COM
Using global catalog server: adserver.ad.com
Search for object by samName: filter=(samAccountName=m2$) root=DC=ad,DC=com
Found existing computer object: CN=m2,CN=Computers,DC=ad,DC=com
Using cn=computers,dc=ad,dc=com container for computer object
Saving zone settings
Zone name: DC=ad,DC=com
Zone version:
Zone schema: NULL_AUTO
Zone GUID: 00112233445566778899aabbccddeeff
Searching for SPNs in GC...
Update Computer's Security Descriptor to allow computer object to read/write
operating system and operating system version properties as well as reset password.
Looking for ntSecurityDescriptor for object CN=m2,CN=Computers,DC=ad,DC=com ....
Checking if the required permissions exist.
Unset "Trust for delegation" bit.
Unset "Use Des Key Only" bit.
Set operatingSystemVersion to "6.1:6.6", so that KDC will issue service ticket using AES enctypes.
Update OS information. This requires computer object update rights...
Update OS information succeeded
Update Encryption Types
Setting machine password...
Setting get init cred callback before set password (rc=0).
Password change succeeded
Samba interoperability is disabled in centrifydc.conf: Skipped synchronizing machine password with Samba
Save kerberos join data...
Using Win 2003 key version 5
Writing kerberos keytab
Updating settings files
Join to domain:ad.com, zone:Auto Zone successful
Starting daemon
Centrify DirectControl started.
Waiting for adclient to startup ......
Adclient startup completed!
Loading domains and trusts information
Initializing cache
.
You have successfully joined the Active Directory domain: ad.com
in the Centrify DirectControl zone: Auto Zone
You may need to restart other services that rely upon PAM and NSS or simply
reboot the computer for proper operation. Failure to do so may result in
login problems for AD users.
Removing directory '/var/centrifydc/previous'
[root@m2 ~]# /etc/init.d/centrify
centrifyda centrifydc centrify-kcm centrify-sshd
[root@m2 ~]# /etc/init.d/centrifyd
centrifyda centrifydc
[root@m2 ~]# /etc/init.d/centrifyd
centrifyda centrifydc
[root@m2 ~]# /etc/init.d/centrifydc status
Centrify DirectControl (pid 10185) is running...
