samba - Feb 2010 - Server not found in kerberos database (with net ads join)

Hi All,

     After running into a few issues in trying to join my debian 
(squeeze) box to
a windows 2008 server, I am running into this (hopefully last) problem...

When I try to do te net join command, I get the following
> nanoelecfs:/home/joel# net join ads -S XX.XX.XX.XX dn 
> 'DC=FS,DC=UML,DC=EDU' -U USERNAME
> Enter EEng_LDAP's password:
> [2010/02/10 15:20:10,  0] libads/sasl.c:819(ads_sasl_spnego_bind)
>   kinit succeeded but ads_sasl_spnego_krb5_bind failed: Server not 
> found in Kerberos database
> Failed to join domain: failed to connect to AD: Server not found in 
> Kerberos database
> ADS join did not work, falling back to RPC...
> Enter USERNAME's password:
> Could not connect to server XX.XX.XX.XX
> Connection failed: NT_STATUS_BAD_NETWORK_NAME
I have the following debain package installed for samba (2:3.4.5~dfsg-1)

on top of this, I have no idea why I need to specify the domain path
as well as the specific IP address of the server. But without those, I don't
even get this far... not specifying the server specifically results in a 
"can't
find domain controller". And if it matters, yes, the DNS I use is actually
the same machine as the domain controller I am trying to connect to.

Well, any thoughts would be appreciated.

Joel Therrien

-- 
Asst. Prof. Joel M. Therrien
Ph: 978-934-3324
Fax: 978-934-3027
Joel_Therrien at uml.edu
Dept. of Electrical&  Computer Engineering
U. Massachusetts-Lowell
1 University Ave
Lowell, MA 01854

What version of libkrb5-3 do you have?  If it's 1.8x, see
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566977

Dale

On 02/10/2010 2:35 PM, Joel Therrien wrote:
> Hi All,
>
>     After running into a few issues in trying to join my debian 
> (squeeze) box to
> a windows 2008 server, I am running into this (hopefully last) problem...
>
> When I try to do te net join command, I get the following
>
>> nanoelecfs:/home/joel# net join ads -S XX.XX.XX.XX dn 
>> 'DC=FS,DC=UML,DC=EDU' -U USERNAME
>> Enter EEng_LDAP's password:
>> [2010/02/10 15:20:10,  0] libads/sasl.c:819(ads_sasl_spnego_bind)
>>   kinit succeeded but ads_sasl_spnego_krb5_bind failed: Server not 
>> found in Kerberos database
>> Failed to join domain: failed to connect to AD: Server not found in 
>> Kerberos database
>> ADS join did not work, falling back to RPC...
>> Enter USERNAME's password:
>> Could not connect to server XX.XX.XX.XX
>> Connection failed: NT_STATUS_BAD_NETWORK_NAME
>
> I have the following debain package installed for samba (2:3.4.5~dfsg-1)
>
> on top of this, I have no idea why I need to specify the domain path
> as well as the specific IP address of the server. But without those, I 
> don't
> even get this far... not specifying the server specifically results in 
> a "can't
> find domain controller". And if it matters, yes, the DNS I use is 
> actually
> the same machine as the domain controller I am trying to connect to.
>
> Well, any thoughts would be appreciated.
>
> Joel Therrien
>

Does the machine you are trying to add has a valid A/PTR records on the dns

if you are using windows dns after creating an entry in the dns
Principal will be auto created by windows kerberos


i think this is the problem

if the problem didnt solve could you attach kerberos and smb conf files

regards


for providing

On Wed, Feb 10, 2010 at 10:35 PM, Joel Therrien <Joel_Therrien at uml.edu>
wrote:
> Hi All,
>
> ? ?After running into a few issues in trying to join my debian (squeeze)
box
> to
> a windows 2008 server, I am running into this (hopefully last) problem...
>
> When I try to do te net join command, I get the following
>
>> nanoelecfs:/home/joel# net join ads -S XX.XX.XX.XX dn
>> 'DC=FS,DC=UML,DC=EDU' -U USERNAME
>> Enter EEng_LDAP's password:
>> [2010/02/10 15:20:10, ?0] libads/sasl.c:819(ads_sasl_spnego_bind)
>> ?kinit succeeded but ads_sasl_spnego_krb5_bind failed: Server not found
in
>> Kerberos database
>> Failed to join domain: failed to connect to AD: Server not found in
>> Kerberos database
>> ADS join did not work, falling back to RPC...
>> Enter USERNAME's password:
>> Could not connect to server XX.XX.XX.XX
>> Connection failed: NT_STATUS_BAD_NETWORK_NAME
>
> I have the following debain package installed for samba (2:3.4.5~dfsg-1)
>
> on top of this, I have no idea why I need to specify the domain path
> as well as the specific IP address of the server. But without those, I
don't
> even get this far... not specifying the server specifically results in a
> "can't
> find domain controller". And if it matters, yes, the DNS I use is
actually
> the same machine as the domain controller I am trying to connect to.
>
> Well, any thoughts would be appreciated.
>
> Joel Therrien
>
> --
> Asst. Prof. Joel M. Therrien
> Ph: 978-934-3324
> Fax: 978-934-3027
> Joel_Therrien at uml.edu
> Dept. of Electrical& ?Computer Engineering
> U. Massachusetts-Lowell
> 1 University Ave
> Lowell, MA 01854
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: ?https://lists.samba.org/mailman/options/samba
>