Marc-andré Labonté
2008-Jul-10 23:30 UTC
[Samba] failed to create kerberos keytab with samba-3.2.0 [solved (sort of)]
Hi all, I compiled samba-3.2.0 on a brand new machine and when i try to join the domain, i get the following result: bash-3.00# net ads join -U administrator Enter administrator's password: Failed to join domain: failed to create kerberos keytab A keytab file is created as /etc/krb5.keytab as it should be It does not seem to depend on the version of kerberos samba was linked against, i tried with 1.5.3 and 1.6.3 . If i set "use kerberos keytab no" in my smb.conf file, samba 3.2 is able to join the domain although samba 3.0.x was working fine with "use kerberos keytab = yes". I tried this on 2 different machines both running solaris 10 update 5. Strangely enough, when messing with different versions of samba, kerberos and keytab files, i discovered a procedure to make it work. 1 - Compile and install samba-3.0.30 2 - join the domain 3 - delete the keytab file that has been created by the previous step 4 - compile and install samba-3.2.0 5 - join the domain Than i tested with net ads testjoin, wbinfo -u, wbinfo -g, everything seems fine. Worked for me, has anyone else experienced this?