thr3ads.net - samba - [Samba] Net ADS JOIN error [Feb 2003]

If this information is useful, please help other people find it:
Share via:

Alessandro.Bruni@cec.eu.int

2003-Feb-06 15:37 UTC

[Samba] Net ADS JOIN error

Hi all,

After having spend 2 days to resolve my problem to configure Samba 3.0 (the
path to the libgcc_s was wrong) I've finally installed it and I'm trying
to
join the W2K AD domain with the command:

1. kinit admin@OUR.DOMAIN.ORG (asking password and getting the ticket from
the W2K)

2. net ads join -Uadmin@OUR.DOMAIN.ORG (doesn't work)

error message :

[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from UCS-2LE to CP850 not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from UTF8 to CP850 not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from ASCII to CP850 not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from CP850 to UCS-2LE not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from CP850 to UTF8 not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from CP850 to ASCII not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from CP850 to UTF8 not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from UTF8 to CP850 not supported
TRADE-Admin@OUR.DOMAIN.INT password: 
[2003/02/06 15:09:08, 1] libsmb/clikrb5.c:krb5_mk_req2(234)
  krb5_get_credentials failed for s-tnet1luxdc01$@OUR.DOMAIN.INT (No
credentials found with supported encryption types)
[2003/02/06 15:09:08, 0] libads/kerberos.c:ads_kinit_password(133)
  kerberos_kinit_password TRADE-Admin@OUR.DOMAIN.INT failed:
Preauthentication failed
[2003/02/06 15:09:08, 1] utils/net_ads.c:ads_startup(150)
  ads_connect: Invalid credentials

Is there somebody that can help me to [2003/02/06 15:09:02, 0]
lib/charcnv.c:init_iconv(93)
  Conversion from UCS-2LE to CP850 not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from UTF8 to CP850 not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from ASCII to CP850 not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from CP850 to UCS-2LE not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from CP850 to UTF8 not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from CP850 to ASCII not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from CP850 to UTF8 not supported
[2003/02/06 15:09:02, 0] lib/charcnv.c:init_iconv(93)
  Conversion from UTF8 to CP850 not supported
TRADE-Admin@OUR.DOMAIN.INT password: 
[2003/02/06 15:09:08, 1] libsmb/clikrb5.c:krb5_mk_req2(234)
  krb5_get_credentials failed for s-tnet1luxdc01$@OUR.DOMAIN.INT (No
credentials found with supported encryption types)
[2003/02/06 15:09:08, 0] libads/kerberos.c:ads_kinit_password(133)
  kerberos_kinit_password TRADE-Admin@TESTNET1.CEC.EU.INT@OUR.DOMAIN.INT
failed: Malformed representation of principal
[2003/02/06 15:09:08, 1] utils/net_ads.c:ads_startup(150)
  ads_connect: Invalid credentials

I've no access to a W2K server but only to a XP with Administrator right for
our OU (Organisational Unit).  ( I hate M$)

Can someone help me on this matter, because I'm getting mad with this stuff.

Many thanks guys

PS Clive: I've read your document join W2K domain, but I'm blocked now
by
this thing to make it work. Sorry to botter you.

----------------------------------------------------------------------------
------------------------------------------------------------
Alessandro BRUNI			
Local Systems & Mail Administrator	
European Commission			
Directorate General TRADE		

E-mail : Alessandro.BRUNI@cec.eu.int
Web site : http://europa.eu.int/comm/trade
----------------------------------------------------------------------------
------------------------------------------------------------

Guenther Deschner

2003-Feb-07 10:45 UTC

head link

[Samba] Net ADS JOIN error

hello alessandro,

On Thu, Feb 06, 2003 at 04:37:24PM +0100, Alessandro.Bruni@cec.eu.int
wrote:> Hi all,
> 
> After having spend 2 days to resolve my problem to configure Samba 3.0 (the
> path to the libgcc_s was wrong) I've finally installed it and I'm
trying to
> join the W2K AD domain with the command:
> 
> 1. kinit admin@OUR.DOMAIN.ORG (asking password and getting the ticket from
> the W2K)
> 
> 2. net ads join -Uadmin@OUR.DOMAIN.ORG (doesn't work)
> 
> error message :
...> [2003/02/06 15:09:08, 1] libsmb/clikrb5.c:krb5_mk_req2(234)
>   krb5_get_credentials failed for s-tnet1luxdc01$@OUR.DOMAIN.INT (No
> credentials found with supported encryption types)
can you post your krb5.conf and tell us what flavour of kerberos you use
(mit or heimdal), sorry if you have posted these infos before but i did
not follow the whole thread.

on my host (samba3cvs, SuSE Linux 8.1, heimdal) you need:

[libdefaults]
        default_etypes = des-cbc-crc des-cbc-md5
        default_etypes_des = des-cbc-crc des-cbc-md5

with mit you should have (at least i guess that):
        default_tkt_enctypes = des-cbc-crc des-cbc-md5
        default_tgs_enctypes = des-cbc-crc

can you possibly try that? and you did change the password of
admin@OUR.DOMAIN.ORG once after your win2k dcs was set up?

bye,
guenther
-- 
Guenther Deschner                                         gd@suse.de
SuSE Linux AG                                        GnuPG: 8EE11688
Berliner Str. 27                      phone:  +49 (0) 30 / 430944778
D-13507 Berlin                           fax:  +49 (0) 30 / 43732804
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20030207/2e4eba29/attachment.bin

Reasonably Related Threads

Search for more seemingly similar threads

samba - Feb 2003 - Net ADS JOIN error

[Samba] Net ADS JOIN error

[Samba] Net ADS JOIN error

Reasonably Related Threads