samba - Nov 2002 - Samba3.0Alpha21- error on logging in to KDC

Hi all,

I have just downloaded and tested with the Samba3.0 Alpha21 Release. I want
to try to create the server account in the active directory, however,
 when I logged in to the KDC by "/usr/kerberos/bin/kinit
administrator@xxx.com", but error returned as

"KDC has no support for encryptions type while getting the initial
credentials" , then I can't go on for creating the acount.

Do you know what's going wrong ?

Thanks a lot for your time

Regards,
Mandy

I can only tell you that it has nothing to do with Samba.
	"Google" the error message...

mandy.tang@wesoft.com.hk wrote:
> 
> Hi all,
> 
> I have just downloaded and tested with the Samba3.0 Alpha21 Release. I want
> to try to create the server account in the active directory, however,
>  when I logged in to the KDC by "/usr/kerberos/bin/kinit
> administrator@xxx.com", but error returned as
> 
> "KDC has no support for encryptions type while getting the initial
> credentials" , then I can't go on for creating the acount.
> 
> Do you know what's going wrong ?
> 
> Thanks a lot for your time
> 
> Regards,
> Mandy
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 28 Nov 2002 mandy.tang@wesoft.com.hk wrote:
> Hi all,
> 
> I have just downloaded and tested with the Samba3.0 Alpha21 Release. I want
> to try to create the server account in the active directory, however,
>  when I logged in to the KDC by "/usr/kerberos/bin/kinit
> administrator@xxx.com", but error returned as
> 
> "KDC has no support for encryptions type while getting the initial
> credentials" , then I can't go on for creating the acount.
Make sure that 

	default_tkt_enctypes = des-cbc-md5 des-cbc-crc

is set in /etc/krb5.conf





cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2         "SAMS Teach Yourself Samba in 24 Hours"
2ed
 "You can never go home again, Oatman, but I guess you can shop
there."
                            --John Cusack - "Grosse Point Blank"
(1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE95gSQIR7qMdg1EfYRAu9oAJ4zXBuHiT7+yTpKavfgbf9hTCXD5ACcCTh9
boGFXzwXAalRqQuui9hLsuk=ypQB
-----END PGP SIGNATURE-----

Hi,

I have found the solution:
Because any account that is present before an "DC promotion" requires
that
the password be changed such that the DES keys can be generated. As the
"administraotr account" is created prior to DC promotion, I need to
change
the administrator password at least once after DC promotion. After changing
the password, the problem solved.

Thanks & Regards,
Mandy




-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 28 Nov 2002 mandy.tang@wesoft.com.hk wrote:
> Hi all,
>
> I have just downloaded and tested with the Samba3.0 Alpha21 Release. I
want
> to try to create the server account in the active directory, however,
>  when I logged in to the KDC by "/usr/kerberos/bin/kinit
> administrator@xxx.com", but error returned as
>
> "KDC has no support for encryptions type while getting the initial
> credentials" , then I can't go on for creating the acount.
Make sure that

             default_tkt_enctypes = des-cbc-md5 des-cbc-crc

is set in /etc/krb5.conf





cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2         "SAMS Teach Yourself Samba in 24 Hours"
2ed
 "You can never go home again, Oatman, but I guess you can shop
there."
                            --John Cusack - "Grosse Point Blank"
(1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE95gSQIR7qMdg1EfYRAu9oAJ4zXBuHiT7+yTpKavfgbf9hTCXD5ACcCTh9
boGFXzwXAalRqQuui9hLsuk=ypQB
-----END PGP SIGNATURE-----