[Samba] Problem to join ADS domain.

Aurélien Bras
Thu, 01 Jun 2006 14:26:27 -0000

Hi,

I post my message here because I can't debug my problem, I hope you have
time to help me to find the problem.

I'm trying to join my Samba machine to an ADS domain, but my "net ads
join"
don't work :(

There is my logs, if you need more detail ask me.

~# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administrateur@TEST.LAN

Valid starting     Expires            Service principal
06/01/06 15:53:13  06/02/06 01:53:11  krbtgt/TEST.LAN@TEST.LAN
        renew until 06/02/06 01:53:13

Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

~# net ads testjoin -Uadministrateur%linux
[2006/06/01 16:08:29, 0] libads/kerberos.c:ads_kinit_password(146)
  kerberos_kinit_password TOTO$@TEST.LAN failed: Client not found in
Kerberos database
[2006/06/01 16:08:29, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: Client not found in Kerberos database
Join to domain is not valid

~# net rpc join -Uadministrateur
Password:
Joined domain TEST.

Here is the problem :

~# net ads join -d3 -Uadministrateur
administrateur's password:
[2006/06/01 16:12:27, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(318)
  Ticket in ccache[MEMORY:net_ads] expiration Fri, 02 Jun 2006 02:12:24 GMT
[2006/06/01 16:12:27, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: Invalid credentials
[2006/06/01 16:12:27, 2] utils/net.c:main(897)
  return code = -1

Thanks,

Aur?lien.