samba - Jul 2006 - Fw: net join error

Did you follow step-by-step the guidelines explained in the HowTo to join
 ADS?

 We too have a W2K3 server updated to last sp and post-sp updates by 
Windows'
 automatic update and we encountered no problems following the HowTo.

 By example, the line "security" of smb.conf file must be set
"ADS", not
 "domain" as in yours...
 In addition, the HowTo says don't use in any case "net rpc..."
commands
when
 you are working with ADS

> ----- Original Message ----- 
> From: "Michael Sodan" <Gabelhonz@web.de>
> To: "Nanni X" <nannix@nodalis.it>
> Sent: Monday, July 31, 2006 1:53 PM
> Subject: Re: [Samba] net join error
>
>
>> Hi,
>>
>> it doesnt matter if i try with net ads join or net rpc join i get the 
>> same error !!!
>>
>> quark-lin ~ # net ads join -U admin-msodan
>> admin-msodan's password:
>> Using short domain name -- TEST
>> [2006/07/31 13:52:43, 0] utils/net_rpc_join.c:net_rpc_join_ok(70)
>>  net_rpc_join_ok: failed to get schannel session key from server 
>> xxx.test.com for domain TEST. Error was NT_STATUS_ACCESS_DENIED
>> Failed to verify membership in domain!
>>
>>
>>
>> regards
>> ______________________________________________________________
>> Verschicken Sie romantische, coole und witzige Bilder per SMS!
>> Jetzt bei WEB.DE FreeMail: http://f.web.de/?mc=021193
>>
>>
>> -- 
>> Il messaggio e' stato analizzato alla ricerca di virus o
>> contenuti pericolosi da ViveLaVie S.p.a., ed e'
>> risultato non infetto.
>>
>>
>>
>> -- 
>> Nessun virus nel messaggio in arrivo.
>> Controllato da AVG Antivirus.
>> Versione: 7.1.394 / Database dei virus: 268.10.5/403 - Data di
rilascio:
>> 28/07/06
>>
>>
> 


-- 
Nessun virus nel messaggio in uscita.
Controllato da AVG Antivirus.
Versione: 7.1.394 / Database dei virus: 268.10.5/403 - Data di rilascio:
28/07/06

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Nanni X wrote:
> Did you follow step-by-step the guidelines explained in 
> the HowTo to join ADS?
> 
> We too have a W2K3 server updated to last sp and post-sp 
> updates by Windows' automatic update and we
> encountered no problems following the HowTo.
> 
> By example, the line "security" of smb.conf file must be set 
> "ADS", not "domain" as in yours...
> In addition, the HowTo says don't use in any case "net
rpc..."
> commands when you are working with ADS
This is slightly misleading.  In the 3.0.23 series, 'net ads join'
uses rpc to join the domain (just like Windows).

The failure below is probably due to the problem with DES
session keys.  I assume the problem system is using an
older krb5 distribution.
>>> quark-lin ~ # net ads join -U admin-msodan
>>> admin-msodan's password:
>>> Using short domain name -- TEST
>>> [2006/07/31 13:52:43, 0] utils/net_rpc_join.c:net_rpc_join_ok(70)
>>>  net_rpc_join_ok: failed to get schannel session key from server
>>> xxx.test.com for domain TEST. Error was NT_STATUS_ACCESS_DENIED
>>> Failed to verify membership in domain!



cheers, jerry
====================================================================Samba       
------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE009PIR7qMdg1EfYRAvnOAJ9nhBgbPEaDaHNn8ls3OzXsOdyWBgCeJpGP
9qdcWIvpxBRDz80mxRT+890=S59H
-----END PGP SIGNATURE-----