samba - Sep 2005 - Kerberos problem with net ads join under AIX

Hello!

If i try a net ads join i get a kerberos error , but my kerberos works
fine, i can do a kinit,klist and so on.

the error i get is the following.

[2005/09/01 08:02:16, 0] libads/kerberos.c:ads_kinit_password(146)
  kerberos_kinit_password root@MY.DOMAIN.COM failed: Cannot resolve network
address for KDC in requested realm
[2005/09/01 08:02:16, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: Cannot resolve network address for KDC in requested realm

I tried nearly everthing until now, but i get no other result than the one
above - can anybody help me?

I run under AIX 5.3 .

      Regards
      Markus

Hi,

please configure your kerberos-config-file and verify the connection to the KDC
(physical connection, DNS, etc.). But one thing is very strange, how can kinit
works with your default kerberos configuration?!


Cheers Stefan

-------- Original Message --------
Subject: [Samba] Kerberos problem with net ads join under AIX (01-Sep-2005 8:04)
From:    markus.paschinger@pva.sozvers.at
To:      samba@lists.samba.org
> Hello!
> 
> If i try a net ads join i get a kerberos error , but my kerberos works
> fine, i can do a kinit,klist and so on.
> 
> the error i get is the following.
> 
> [2005/09/01 08:02:16, 0] libads/kerberos.c:ads_kinit_password(146)
>   kerberos_kinit_password root@MY.DOMAIN.COM failed: Cannot resolve network
> address for KDC in requested realm
> [2005/09/01 08:02:16, 0] utils/net_ads.c:ads_startup(191)
>   ads_connect: Cannot resolve network address for KDC in requested realm
> 
> I tried nearly everthing until now, but i get no other result than the one
> above - can anybody help me?
> 
> I run under AIX 5.3 .
> 
>       Regards
>       Markus
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
>

Hi, 
With Heimdal- oder MIT-kerberos it is not necessary to cofigure the 
kerberos-config-file.
But a reverse DNS lookup has to give the netbios name of the KDC.
I solved that with a corresponding entry in /etc/hosts (on linux...)

xxx.xxx.xxx.xxx NETBIOSNAME-OF-KDC (uppercase)

All can be read in chapter 6 of the official Samba-howto.

Cheers Kurt

> 
> 
> Hi,
> 
> please configure your kerberos-config-file and verify the connection
> to the KDC (physical connection, DNS, etc.). But one thing is very 
> strange, how can kinit works with your default kerberos configuration?!
> 
> 
> Cheers Stefan
> 
> -------- Original Message --------
> Subject: [Samba] Kerberos problem with net ads join under AIX (01-
> Sep-2005 8:04)
> From:    markus.paschinger@pva.sozvers.at
> To:      samba@lists.samba.org
> 
> > Hello!
> > 
> > If i try a net ads join i get a kerberos error , but my kerberos works
> > fine, i can do a kinit,klist and so on.
> > 
> > the error i get is the following.
> > 
> > [2005/09/01 08:02:16, 0] libads/kerberos.c:ads_kinit_password(146)
> >   kerberos_kinit_password root@MY.DOMAIN.COM failed: Cannot resolve 
network
> > address for KDC in requested realm
> > [2005/09/01 08:02:16, 0] utils/net_ads.c:ads_startup(191)
> >   ads_connect: Cannot resolve network address for KDC in requested 
realm
> > 
> > I tried nearly everthing until now, but i get no other result than the
one
> > above - can anybody help me?
> > 
> > I run under AIX 5.3 .
> > 
> >       Regards
> >       Markus
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/listinfo/samba
> > 
> > 
> 
> 
> 
>