linux - 将CentOS 7加入事件目录

我正在尝试将centos 7 pc加入Windows 2012活动目录。我已安装这些软件包作为先决条件。

sssd realmd oddjob oddjob-mkhomedir adcli samba-common samba-common-tools krb5-workstation openldap-clients policycoreutils-python

DNS也正在解析。但当我试着

realm -v join -U 'administrator' vsis.tec

每次都会出现这个错误。

 [root@centos mnt]# realm -v join -U 'administrator' vsis.tec
  * Resolving: _ldap._tcp.vsis.tec
  * Performing LDAP DSE lookup on: 172.16.100.5
  * Successfully discovered: vsis.tec
 Password for administrator:
  * Required files: /usr/sbin/oddjobd, /usr/libexec/oddjob/mkhomedir, /usr/sbin/sssd, /usr/bin/net
  * LANG=C LOGNAME=root /usr/bin/net -s /var/cache/realmd/realmd-smb-conf.NOG5ZY -U administrator ads join vsis.tec
 Enter administrator's password:
 Failed to join domain: failed to lookup DC info for domain 'vsis.tec' over rpc: The transport connection has been reset.
  ! Joining the domain vsis.tec failed
 realm: Couldn't join realm: Joining the domain vsis.tec failed

请帮我找出错误并加入到广告中。
谢谢您

最佳答案

检查是否已从CentOS打开了所有的活动目录端口。。。
AD端口列表-https://technet.microsoft.com/en-us/library/dd772723(v=ws.10).aspx
谢谢，
阿施施