Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a RHEL 6.3 Amazon Web Service instance I'm trying to join to a Windows Server 2012 AD domain through PowerBroker Identity Services Open (ie: not enterprise).

The Server 2012 instance is in the same subnet, I've opened TCP 88, 139, 389, 445, 464 and UDP 53, 88, 137, 445, 464 in the firewall.

When I run domainjoin-cli join administrator I receive the following:

Error: NERR_DCNotFound [code 0x00000995]

Is this an SRV record issue?

The Server 2012 instance (also running in AWS, in case there's any confusion about that) is running DNS and Active Directory, and the RHEL system is using that system as its name server.

share|improve this question
Issue was resolved after adding 389 UDP (LDAP) to the inbound ports on the firewall rules used by both instances. Silly mistake... – KingsRook Nov 30 '12 at 21:24

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.