similar to: winbind/samba 3.0.1-1 fails to store machine account password when joining ADS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm using samba 3.0.0beta1. When I try join ADS I got error: # net ADS JOIN -U Administrator [2003/06/25 13:03:34, 1] param/loadparm.c:lp_do_parameter(3103) ~ WARNING: The "winbind uid" option is deprecated [2003/06/25 13:03:34, 1] param/loadparm.c:lp_do_parameter(3103) ~ WARNING: The "winbind gid" option is deprecated

Hi, I am having trouble joining an AD Domain with samba3.0.10: All checks mentioned in the Samba-Guides (regarding LDAP & Kerberos) passed, but when I use >netra:~/samba-3.0.10/source/bin# ./net ads join -Utestuser >testuser's password: >[2005/01/27 10:41:11, 0] libads/kerberos.c:ads_kinit_password(146) > kerberos_kinit_password testuser@INTRA.DOMAIN.DE failed: Unknown

Can anyone suggest how to get around the following? [2009/09/05 00:32:55, 3] libads/sasl.c:ads_sasl_spnego_bind(300) ads_sasl_spnego_bind: got server principal name = exdc1$@domain.example.com [2009/09/05 00:32:55, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) [2009/09/05 00:32:56, 0]

Hi, Just trying to get a SLES10 machine running 3.3.4 to join a 2008 domain and getting this .... any ideas?? Running: net -d 3 -U admuser@DOM.REALM.CO.COM ads join createcomputer="REG/CN/OU/Services/" Error: [2009/05/15 13:42:13, 3] libads/sasl.c:ads_sasl_spnego_bind(780) ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 [2009/05/15 13:42:13, 3]

HI, I am sorry I forgot to post the problem that I am having. It is the same issue who posted this e-mail originally. Please let me know what should I do to fix the problem that I am having. Edit /etc/samba/smb.conf [global] realm = KERBEROS.REALM security = ADS encrypt passwords = yes password server = kerberos.server Edit /etc/krb5.conf [libdefaults] default_realm = KERBEROS.REALM

I'm having issues joining samba to a domain with a large number of domain controllers. The domain is a mixed windows 2003/windows 2008 domain. The samba server is Solaris 10 update 5 running on SPARC. I have a custom samba build of samba 3.0.28 on the server because we need Tobi Oetiker's samfs patch. Because of the issue that version has with passwords longer than eight characters on

Hello I am currently setting up a new domain structure at work, and am trying to set up samba to authenticate against my Active directory domain. What I am having trouble doing is joining the Linux system to the domain. The system is running Redhat 8.0, no updates with samba-3.0.0beta3 Here is the error I get [2003/07/29 09:32:53, 3] libads/sasl.c:ads_sasl_spnego_bind(190) got

I've been trying to get the active directory working in beta 3 and everything works perfectly up to doing the "net join -U Administrator%password" The script chokes on loading the smb.conf on the "ads server =" line. I've tried configuring/compiling again, using the rpm and nothing get me past that point. Output from error is below Any chance someone knows what is

Hello, I'm not sure if it's a bug - or I'm just too stupid..!? Downloaded the Samba beta-code from ftp.suse.com/gd - rpm's for SuSE 8.2 (03/06/22). Installed all packages with no problems - samba works well, but integration in a W2K Domain fails. Kinit is successful but joining a domain brings up the following errors. nas-01:~ # net ads join [2003/06/23 21:44:41, 1]

Hi, I am trying to get samba/winbind setup to do active directory authentication. I am using samba 3.0.7, kerberos 1.3.5, and openldap 2.2.17. I can kinit and klist just fine. However, when I try to "net ads join -d10 -Uabostick", I get the error listed below: [2004/09/16 17:04:26, 3] libads/sasl.c:ads_sasl_spnego_bind(211) ads_sasl_spnego_bind: got server principal name

Hello maorui/all, I have the same problem, with the Debian 3.0r2, using samba 3.0.1 compiled from sources, with the options: ./configure --with-ads --with-winbind --with-winbind-auth-challenge --with-smbmount --prefix=/usr --with-ldap --with-pam_smbpass --with-syslog --with-utmp --with-swatdir=/etc/samba/swat --with-libsmbclient --with-acl-support --with-quotas --with-pam --with-nisplus-home

Problem with join to Active Directory [root@clust-master samba]# net ads join -S 10.0.0.1 -U Administrator Administrator's password: [2006/05/22 10:24:05, 0] libads/ldap.c:ads_join_realm(1640) ads_add_machine_acct (clust): Type or value exists ads_join_realm: Type or value exists [root@clust-master samba]# kinit Administrator@COROD.LOCAL Password for Administrator@COROD.LOCAL: As you can

I'm using RH9, and install Samba 3.0.0 by using rpm package. I use following configure files. /etc/samba/smb.conf: [global] workgroup = DOMAIN realm = DOMAIN.COM server string = Demo Samba Server security = ADS username map = /etc/samba/smbusers log file = /var/log/samba/log.%m max log size = 50

Hi everyone, I've done a lot of reading on this issue over the last couple of days I had a "Red Hat Linux release 9 (Shrike)" box running 3.0.3a and the stock redhat krb5 package and it was authenticating against a w2k AD domain (over which I have very little control save for my little OU). things were working ok, but I wanted to update it to the new bug fixed versions.

I've a little stupid problem with winbindd when I start it I can read in winbind log: [2003/10/17 10:17:47, 1] nsswitch/winbindd_util.c:add_trusted_domain(149) Added domain GRANDI_STAZIONI GSTAZIONI.IT [2003/10/17 10:17:47, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269) krb5_cc_get_principal failed (No credentials cache found) [2003/10/17 10:17:47, 0] libads/kerberos.c:ads_kinit_password(133)

We have a problem with our setup that exposed another problem in winbindd. Setup: Samba 3.0.1, openLDAP 1.2.23 for idmap backend using port 1389, security=ads (w2k). All works after we get the daemons started successfully. The first issue has to do with the initial setup of both a Samba server [smbd, nmbd, winbindd, slapd], and a Samba client [just nmbd and winbindd]. We do the

Ok I deleted the incorrect conf file and set it up using Yast again here is the amended file. I tried using the IP address of the server this time but I'm still getting the same errors as before. [libdefaults] default_realm = ELLISONSLEGAL.COM clockskew = 300 [domain_realm] .ELLNET = ELLISONSLEGAL.COM [realms] ELLISONSLEGAL.COM = { kdc = 10.0.0.31 default_domain = ELLNET

QUESTION: Does samba have client side TLS capabilities? BACKGROUND Samba ADS compliant distributions tried: RHEL samba 3.0.10 Blastware samba 3.0.22 (for Solaris 8 and above) Solaris 9 compilations 3.0.24, 25b, 25c, 26a My ADS is running in native 2003 mode. The only access I have to it is to set up Machine accounts. SMB.CONF For all versions I used the same smb.conf (see end of document) NET

sorry for big posting direct me please on my errors samba 3.0.25b kerberos heimdal 0.8.1-p2 # kinit adminuser adminuser@USR.NW.MTS.RU's Password: # klist Credentials cache: FILE:/tmp/krb5cc_0 Principal: adminuser@USR.NW.MTS.RU Issued Expires Principal Jul 31 11:22:18 Jul 31 21:22:18 krbtgt/USR.NW.MTS.RU@USR.NW.MTS.RU # net -d 3 ads join ads -U adminuser

Hi, Using samba 3.0.25b, testing to join to a Windows 2008 domain using ADS security with kerberos and it doesn't seem to work. Anybody else tried this combination? Same configuration worked joining to a Windows 2003 R2 domain. I'm not a samba expert but looking at the log it looks like the not_defined_in_RFC4178@please_ignore have something to do with it? Output from "net