samba - Feb 2014 - kinit succeeded but ads_sasl_spnego_krb5_bind failed: Program lacks support for encryption type

by the by, I have been following the Oracle guide on how to setup samba with
ADS and kerberos...

How to configure Solaris Samba to authenticate to and join a Windows Active
Directory Server (ADS) Domain (Doc ID 1494126.1)

Cheers



--
View this message in context:
http://samba.2283325.n4.nabble.com/kinit-succeeded-but-ads-sasl-spnego-krb5-bind-failed-Program-lacks-support-for-encryption-type-tp4660730p4660731.html
Sent from the Samba - General mailing list archive at Nabble.com.

Hello All,

Having some trouble connecting to my Windows domain with my Solaris server.
Some details included below that might give you an idea of what is going on
here. I have tried setting allow weak crypto in the krb5.conf, I have tried
specifying the encryption types and leaving it blank to use the defaults all
to no avail...

bash-3.2# kinit me at DOMAIN.LOCAL
Password for me at DOMAIN.LOCAL:

bash-3.2# klist -e
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: me at DOMAIN.LOCAL

Valid starting               Expires               Service principal
12/02/2014 14:41  13/02/2014 00:41  krbtgt/DOMAIN.LOCAL at DOMAIN.LOCAL
        renew until 19/02/2014 14:41, Etype(skey, tkt): AES-128 CTS mode
with 96-bit SHA-1 HMAC, unsupported encryption type 18

bash-3.2# net ads join -U me
Enter me's password:
kinit succeeded but ads_sasl_spnego_krb5_bind failed: Program lacks support
for encryption type
Failed to join domain: failed to connect to AD: Program lacks support for
encryption type

bash-3.2# smbd -V
Version 3.6.20

bash-3.2# uname -a
SunOS myserver 5.10 Generic_147440-19 sun4v sparc sun4v

Any ideas you have would be greatly appreciated.

Cheers





--
View this message in context:
http://samba.2283325.n4.nabble.com/kinit-succeeded-but-ads-sasl-spnego-krb5-bind-failed-Program-lacks-support-for-encryption-type-tp4660730.html
Sent from the Samba - General mailing list archive at Nabble.com.