christoph.beyer@desy.de
2009-Jul-01 10:03 UTC
[Samba] net ads join -> strong(er) authentication required
Hi, my windows folks migrated to AD 2008 R2, resulting in the following error message when trying to join the domain: [HOST] /etc $ /opt/csw/bin/net ads join -U <USER> Enter <USER>'s password: [2009/07/01 11:51:28, 0] libads/sasl.c:ads_sasl_spnego_bind(819) kinit succeeded but ads_sasl_spnego_krb5_bind failed: Strong(er) authentication required Failed to join domain: failed to connect to AD: Strong(er) authentication required Any hints ? best regards ~christoph -- /* Christoph Beyer | Office: Building 2b / 23 *\ * DESY | Phone: 040-8998-2317 * * - IT - | Fax: 040-8998-4060 * \* 22603 Hamburg | http://www.desy.de */
Guenther Deschner
2009-Jul-01 10:26 UTC
[Samba] net ads join -> strong(er) authentication required
On Wed, Jul 01, 2009 at 12:03:28PM +0200, christoph.beyer@desy.de wrote:> Hi, > > my windows folks migrated to AD 2008 R2, resulting in the following error > message when trying to join the domain: > > [HOST] /etc $ /opt/csw/bin/net ads join -U <USER> > Enter <USER>'s password: > [2009/07/01 11:51:28, 0] libads/sasl.c:ads_sasl_spnego_bind(819) > kinit succeeded but ads_sasl_spnego_krb5_bind failed: Strong(er) > authentication required > Failed to join domain: failed to connect to AD: Strong(er) authentication > required > > Any hints ?You might need to set "client ldap sasl wrapping" in order to make this work. See the manpage for possible settings. Guenther -- G?nther Deschner GPG-ID: 8EE11688 Red Hat gdeschner@redhat.com Samba Team gd@samba.org -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 197 bytes Desc: not available Url : http://lists.samba.org/archive/samba/attachments/20090701/88f3bc1f/attachment.bin