Jeremy O'Leary
2005-Aug-24 21:15 UTC
[Samba] Preauthentication failed errors when trying to join Samba 3.0.14a to a W2k AD OU
Hi all, I'm trying to add a samba 3.0.14a server (on Solaris 9 w/kerberos5 v1.4.1 & OpenLDAP) to a Windows 2000 AD OU and I'm able to successfully run "/apps/krb5/bin/kinit username@NA.EXAMPLE.NET" but when I run ... net ads join "PATH\TO\THE\RIGHT\SUB\OU" I keep getting the following error message: libads/kerberos.c:get_service_ticket(337) get_service_ticket HOSTNAME$@NA.EXAMPLE.NET@NA.EXAMPLE.NET failed: Preauthentication failed Here is an example of what I have in my smb.conf file. security = ads realm = na.example.net encrypt passwords = yes use kerberos keytab = yes netbios name = havok workgroup = naex password server = dc.server1.ip.addr dc.server2.ip.addr wins server = <ip addr> I have an unmodified krb5.conf file, klist reports the following. Ticket cache: FILE:/tmp/krb5cc_0 Default principal: username@NA.EXAMPLE.NET Valid starting Expires Service principal 08/24/05 14:06:40 08/25/05 00:06:43 krbtgt/NA.EXAMPLE.NET@NA.EXAMPLE.NET renew until 08/25/05 14:06:40 08/24/05 14:06:56 08/25/05 00:06:43 usaesm1dc01$@NA.EXAMPLE.NET renew until 08/25/05 14:06:40 08/24/05 14:06:57 08/25/05 00:06:43 kadmin/changepw@NA.EXAMPLE.NET renew until 08/25/05 14:06:40 Kerberos 4 ticket cache: /tmp/tkt0 klist: You have no tickets cached --- Any suggestions? thanks, Jeremy
Seemingly Similar Threads
- kerberos_kinit_password -- Preauthentication falied ??
- get_service_ticket: kerberos_kinit_password ULISES$@SYSTEMMASTER.COM.AR@SYSTEMMASTER.COM.AR failed: Preauthentication failed
- net ads join problems
- net ads join
- 'net ads join' Segmentation fault for one ADS tree but not another?!