samba - May 2007 - kerberos_kinit_password -- Preauthentication falied ??

Hi,

I'm fairly new to samba so apologies if this is an old problem....

When I try 'net ads join -U administrator' I get the following:

[2007/05/22 12:15:15, 0] libads/ldap.c:ads_add_machine_acct(1368)
  ads_add_machine_acct: Host account for storage4 already exists - 
modifying old account
Using short domain name -- ABSOLUTESTUDIOS
[2007/05/22 12:15:15, 0] libads/kerberos.c:get_service_ticket(335)
  get_service_ticket: kerberos_kinit_password 
STORAGE4$@ABSOLUTESTUDIOS.CO.UK@ABSOLUTESTUDIOS.CO.UK failed: 
Preauthentication failed
Segmentation fault


wbinfo -p, -u, -g, -t all OK
'kinit administrator@ABSOLUTESTUDIOS.CO.UK' returns a password prompt

the following is my smb.conf:
[global]
   workgroup = ABSOLUTESTUDIOS
    server string = Samba Server
    printcap name = /etc/printcap
    load printers = yes
    cups options = raw
    log file = /var/log/samba/%m.log
    max log size = 50
   security = ads
    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
    dns proxy = no
    veto files = /*.mp3/*.divx/*.wma/*.m4a/
    inherit permissions = yes
    map acl inherit = yes
    nt acl support = yes
    panic action = /usr/share/samba/panic-action %d
    smb ports = 445
   template shell = /bin/false
   winbind separator = +
   idmap uid = 10000-20000
   idmap gid = 10000-20000
   winbind use default domain = yes
    winbind enum users = yes
    winbind enum groups = yes
    winbind nested groups = yes
   password server = *
   realm = ABSOLUTESTUDIOS.CO.UK
    host msdfs = yes
        vfs object = recycle
        recycle:repository = Recycle Bin/%U
        recycle:keeptree = Yes
        recycle:versions = Yes
    recycle:exclude = *.iff *.ng
[printers]
    comment = All Printers
    path = /var/spool/samba
    browseable = no
    printable = yes
[dump]
        path = /projects/dump
        writeable = yes
        guest ok = yes
    msdfs root = yes
    directory mask = 0700
        veto files = *.mp3/*.divx/*.wma/*.m4a/
        vfs object = recycle:repository="Recycle Bin"
recycle:keeptree=True


Im pretty stumped on this...any advice would be greatly appreciated!

-Kris

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Kris Monstad wrote:
>  ads_add_machine_acct: Host account for storage4 already 
>      exists - modifying old account
Seems like you are using a old version of Samba.
> Using short domain name -- ABSOLUTESTUDIOS
>  get_service_ticket: kerberos_kinit_password
> STORAGE4$@ABSOLUTESTUDIOS.CO.UK@ABSOLUTESTUDIOS.CO.UK failed:
> Preauthentication failed
> Segmentation fault
run "net ads join -U admin -d 10" and see if that gives
you a hint where the segv occurs (or run it under gdb).





cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGUt4eIR7qMdg1EfYRApNAAJ9fa0OSkUVxyhoyIVv6jvAuqLYq6wCgvFdw
puSkYDA8bdSJHrEhge45B1A=rUBF
-----END PGP SIGNATURE-----

I got this one sorted out:

I used a pared back smb.conf and found it was working, albeit not 
exactly as I would like....

I went through the lines of the pared back version changing them to the 
config which I was using below, then restarting samba and checking 'net 
ads join' . The  (seeming) cause of the segmentation fault was the 
'password server = *' line.

Thanks for the suggestions!

-Kris


Kris Monstad wrote:
>
> Hi,
>
> I'm fairly new to samba so apologies if this is an old problem....
>
> When I try 'net ads join -U administrator' I get the following:
>
> [2007/05/22 12:15:15, 0] libads/ldap.c:ads_add_machine_acct(1368)
>  ads_add_machine_acct: Host account for storage4 already exists - 
> modifying old account
> Using short domain name -- ABSOLUTESTUDIOS
> [2007/05/22 12:15:15, 0] libads/kerberos.c:get_service_ticket(335)
>  get_service_ticket: kerberos_kinit_password 
> STORAGE4$@ABSOLUTESTUDIOS.CO.UK@ABSOLUTESTUDIOS.CO.UK failed: 
> Preauthentication failed
> Segmentation fault
>
>
> wbinfo -p, -u, -g, -t all OK
> 'kinit administrator@ABSOLUTESTUDIOS.CO.UK' returns a password
prompt
>
> the following is my smb.conf:
> [global]
>   workgroup = ABSOLUTESTUDIOS
>    server string = Samba Server
>    printcap name = /etc/printcap
>    load printers = yes
>    cups options = raw
>    log file = /var/log/samba/%m.log
>    max log size = 50
>   security = ads
>    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>    dns proxy = no
>    veto files = /*.mp3/*.divx/*.wma/*.m4a/
>    inherit permissions = yes
>    map acl inherit = yes
>    nt acl support = yes
>    panic action = /usr/share/samba/panic-action %d
>    smb ports = 445
>   template shell = /bin/false
>   winbind separator = +
>   idmap uid = 10000-20000
>   idmap gid = 10000-20000
>   winbind use default domain = yes
>    winbind enum users = yes
>    winbind enum groups = yes
>    winbind nested groups = yes
>   password server = *
>   realm = ABSOLUTESTUDIOS.CO.UK
>    host msdfs = yes
>        vfs object = recycle
>        recycle:repository = Recycle Bin/%U
>        recycle:keeptree = Yes
>        recycle:versions = Yes
>    recycle:exclude = *.iff *.ng
> [printers]
>    comment = All Printers
>    path = /var/spool/samba
>    browseable = no
>    printable = yes
> [dump]
>        path = /projects/dump
>        writeable = yes
>        guest ok = yes
>    msdfs root = yes
>    directory mask = 0700
>        veto files = *.mp3/*.divx/*.wma/*.m4a/
>        vfs object = recycle:repository="Recycle Bin" 
> recycle:keeptree=True
>
>
> Im pretty stumped on this...any advice would be greatly appreciated!
>
> -Kris
>
>
>
>
>
>