Hi All, Any clues as to what is causing this? I have seen similar questions asked before in regards to joining ADS domain but have not been able to find a solution to my problem. The domain is a Native mode ADS on win2k3 with signing required. Please let me know if additional info or logs are required to diagnose the problem. I did a 'net ads join ADSDOM -U admin@ADSDOM.UNET.AUCKLAND.AC.NZ -d10' I was asked for my password and I entered it. The last bit of the result is shown below.. Regards, Dulantha P. University of Auckland. New Zealand. [2003/09/30 11:57:10, 3] libads/sasl.c:ads_sasl_spnego_bind(191) got principal=dc1$@ADSDOM.UNET.AUCKLAND.AC.NZ [2003/09/30 11:57:10, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269) krb5_cc_get_principal failed (No credentials cache found) [2003/09/30 11:57:10, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276) krb5_get_credentials failed for dc1$@ADSDOM.UNET.AUCKLAND.AC.NZ (KRB5 error code 52) [2003/09/30 11:57:10, 1] utils/net_ads.c:ads_startup(181) ads_connect: Operations error [2003/09/30 11:57:10, 2] utils/net.c:main(758) return code = -1
On Tue, 30 Sep 2003 dulantha@wwsemail.shacknet.nu wrote:> Hi All, > > Any clues as to what is causing this? I have seen similar questions asked > before in regards to joining ADS domain but have not been able to find a > solution to my problem. > > The domain is a Native mode ADS on win2k3 with signing required. Please let me > know if additional info or logs are required to diagnose the problem. > > I did a 'net ads join ADSDOM -U admin@ADSDOM.UNET.AUCKLAND.AC.NZ -d10' I was > asked for my password and I entered it. The last bit of the result is shown > below..Are you using Samba-3.0.0? What are your smb.conf entries for: netbios name workgroup realm password server And what is the domain name of your Win2K3 server? Where is the DNS server? What is the Computer name of the Win2K3 ADS server/Domain Controller? - John T.> > Regards, > Dulantha P. > > University of Auckland. > New Zealand. > > > [2003/09/30 11:57:10, 3] libads/sasl.c:ads_sasl_spnego_bind(191) > got principal=dc1$@ADSDOM.UNET.AUCKLAND.AC.NZ > [2003/09/30 11:57:10, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269) > krb5_cc_get_principal failed (No credentials cache found) > [2003/09/30 11:57:10, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276) > krb5_get_credentials failed for dc1$@ADSDOM.UNET.AUCKLAND.AC.NZ (KRB5 error > code 52) > [2003/09/30 11:57:10, 1] utils/net_ads.c:ads_startup(181) > ads_connect: Operations error > [2003/09/30 11:57:10, 2] utils/net.c:main(758) > return code = -1 > > > >-- John H Terpstra Email: jht@samba.org
> Also (but probably not in your particular case). What version of > Keberos are you running locally (MIT 1.3.1 is suggested, if possible, or > a very recent Heimdal), and have you ever changed the password for > 'admin' since the domain was created/upgraded to ADS?I am running latest MIT 1.2.7-10 will now upgrade rebuild MIT kerberos 1.3.1 and Samba 3 from srpms.> Are you using Samba-3.0.0?Yes I am running redhat 9. I built and installed the srpm for samba.> netbios nameLINUX1> workgroupADSDOM> realmADSDOM.UNET.AUCKLAND.AC.NZ> password serverthis is the IP address of the dc1.adsdom.unet.auckland.ac.nz> > And what is the domain name of your Win2K3 server?dc1.adsdom.unet.auckland.ac.nz> Where is the DNS server?DNS servers are the dc1.adsdom.unet.auckland.ac.nz and another domain controller.> What is the Computer name of the Win2K3 ADS server/Domain Controller?dc1.adsdom.unet.auckland.ac.nz Quoting Andrew Bartlett <abartlet@samba.org>:> On Tue, 2003-09-30 at 10:56, John H Terpstra wrote: > > On Tue, 30 Sep 2003 dulantha@wwsemail.shacknet.nu wrote: > > > > > Hi All, > > > > > > Any clues as to what is causing this? I have seen similar questions > asked > > > before in regards to joining ADS domain but have not been able to find a > > > solution to my problem. > > > > > > The domain is a Native mode ADS on win2k3 with signing required. Please > let me > > > know if additional info or logs are required to diagnose the problem. > > > > > > I did a 'net ads join ADSDOM -U admin@ADSDOM.UNET.AUCKLAND.AC.NZ -d10' I > was > > > asked for my password and I entered it. The last bit of the result is > shown > > > below.. > > > > Are you using Samba-3.0.0? > > > > What are your smb.conf entries for: > > netbios name > > workgroup > > realm > > password server > > > > And what is the domain name of your Win2K3 server? > > Where is the DNS server? > > What is the Computer name of the Win2K3 ADS server/Domain Controller? > > Also (but probably not in your particular case). What version of > Keberos are you running locally (MIT 1.3.1 is suggested, if possible, or > a very recent Heimdal), and have you ever changed the password for > 'admin' since the domain was created/upgraded to ADS? > > Andrew Bartlett > > -- > Andrew Bartlett abartlet@pcug.org.au > Manager, Authentication Subsystems, Samba Team abartlet@samba.org > Student Network Administrator, Hawker College abartlet@hawkerc.net > http://samba.org http://build.samba.org http://hawkerc.net >