Results 1 to 1 of 1

Thread: msktutils create in AD child OU

  1. #1
    Join Date
    May 2018
    Beans
    23

    msktutils create in AD child OU

    EDIT: SOLVED:

    You apparently have to START with the most deep layer, and work your way out. Which has got to be the most conter-intuitive thing I have encountered in a long time.

    IE:
    HTML Code:
    'OU=DEVICES,OU=KALX'
    instead of
    HTML Code:
    'OU=KLAX,OU=DEVICES'
    This isn't mentioned in any of the MAN pages I looked up, nor did I find anything hinting at this in any of my search terms which included nested, child, OU, AD, LDAP, etc.

    Discovered it on my own, And I do not know why I decided to try it. I do not have experience with AD or LDAP. I'm just a windows user level, and ubuntu support level, starting my Sys Admin path.


    Original Post Below
    __________________________________

    I'm a bit stumped. Cant seem to find the solution to adding a computer to the correct OU, which is nested in another OU on my Windows AD server. I can not change the AD structure (as it is not my choice, and i have to work with it)

    More Details:
    AD Structure:
    HTML Code:
    AD01.klaxmaster.local > Klax(OU)>Devices(OU)
    (The default computer location would just be AD01.klaxmaster.local>Computers)

    Command being used:
    HTML Code:
    msktutil -N -c -b 'OU=KLAX,OU=DEVICES' -s ADTEST/adtest.klaxmaster.local -k my-keytab.keytab –-computer-name ADTEST –-upn ADTEST$ –-server ad01.klaxmaster.local –-user-creds-only
    I believe I have tried every combo of CN= and OU=. But i can't get it into the child OU 'DEVICES'

    I CAN get it to add the object to OU=KLAX making it at the same level as the child OU=DEVICES, but i need it inside, not parallel.

    I can not settle for having it placed it in the default computers list, As I need to replicate what my office uses, which i have no control or say in changing.

    The actual error I get is:
    HTML Code:
    Error: ldap_add_ext_s failed (No such object)
               additional info:0000208D: NameErr: DSID-03100288, prolem 2001 (NO_OBJECT), data 0, best match of:
               'DC=klaxmaster,DClocal'

    EDIT:
    I am left wondering if I just can't figure out the SYNTAX or if msktutils just cant add an object in a nested OU (Child OU)
    the latter seems unlikely, though, as i can authenticate with the admin user that is in the same depth but in
    HTML Code:
    AD01.klaxmaster.local > Klax(OU)>Employees(OU)>klax.master
    Last edited by klaxmaster; July 30th, 2020 at 12:44 AM. Reason: Added last section

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •