similar to: Insufficient access error

I have been trying for two weeks to get onto a Win2k domain which has active directory with no success. The Suse YAST samba client will not do ADS, only domain, server, or user, so I went to the command line stuff I found the the Samba documentation. I can do kinit and get back the following: sha-linux:/etc/samba # kinit art_fore@3MTS.COM art_fore@3MTS.COM's Password: kinit: NOTICE:

Edit you smb.conf file. In RedHat I believe this is located in /etc/samba/smb.conf Look for the line you want to get rid of and fill it in with what ever you want. Its just a description field. Jack -----Original Message----- From: samba-bounces+jack.palmadesso=siemens.com@lists.samba.org [mailto:samba-bounces+jack.palmadesso=siemens.com@lists.samba.org]On Behalf Of Terry L. Eleiott Sent:

[originally posted to fedora-users] I'm having difficulty getting samba/winbind to authenticate of a W2K3 box. I've searched the list archives and although there are some similar problems, none have seemed to help resolve this one. Here's the network configuration: - Windows 2003 Server gx270-rmaniar [192.168.0.100] - Fedora Core 3 gx280rmaniarFC3 [192.168.0.5] FYI: A Windows XP box

server: ms 2003 with ads client: debian 3.1/samba 3.0.14 smb.conf: .. [global] workgroup = SP-GRUPPE password server = 10.85.117.150 realm = SP-GRUPPE.DE encrypt passwords = no server string = %h server (Samba %v) obey pam restrictions = yes passdb backend = tdbsam, guest passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .

Hi, I'm using samba just for its "net join" functionality. Computer accounts and kerberos keytabs are created by Samba in Active Directory via "net ads join", then used by UNIX clients to authorise and authenticate via LDAP and Kerberos. Samba works perfectly until the computers hostname is longer than 15 characters. Then any attempt to join the domain fails with: ----

hello have such problems with my samba 3.0.12 @ FreeBSD 5.4 we have an Active Directory here. and a domain. root@freeway# testparm Load smb config files from /usr/local/etc/smb.conf Processing section "[public]" Processing section "[private]" Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions # Global parameters

SLES 9 SP2 samba-3.0.14a-0.4 heimdal-lib-0.6.1rc3-55.15 samba-winbind-3.0.14a-0.4 pam-modules-9-18.10 pam_krb5-1.3-201.7 I've been searching for days for a concrete answer to this question: Is it possible to join an ADS domain from a Linux Samba server without having Administrator privileges? Yes or No. If so exactly what are the minimal requirements for joining the Linux box to the

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ~ /usr/bin/net ads join -Udennisb dennisb password: [2004/11/02 17:31:56, 0] libads/ldap.c:ads_add_machine_acct(1006) ~ Host account for if-srv-hos1 already exists - modifying old account [2004/11/02 17:31:56, 0] libads/ldap.c:ads_join_realm(1342) ~ ads_add_machine_acct: No such object ads_join_realm: No such object Also: net user | wc -l reports

My agency is moving all users and computers to a new domain. Our current domain uses AD and the new domain will use AD. My current samba servers are running 3.0.20a with ADS security with winbind on Debian Stable (Sarge) with no problems. I set up a test samba server using 3.0.20b, the new krb5.conf and smb.conf. kinit works fine. ("Authenticated to Kerberos v5") I prestage the server

Hello all, I'm not too sure we're having an ADS issue or not. Perhaps someone could shed some light on this for us? Here's what we're seeing during a net join: 14:32 myhost<42> sudo ./net join -S domaincontroller -U admin_user Admin_user password: [2004/05/05 14:33:39, 0] libads/ldap.c:ads_add_machine_acct(1006) Host account for myhost already exists - modifying old

I'm trying to join a Samba 3.0.4 (compiled from source on Debian) to an Active Directory as a member server. I believe Kerberos is configured correctly as kinit creates a ticket for the realm. Executables appear to have support for Kerberos and LDAP (smbd -b | grep KRB and grep LDAP) return OK. When I try to join the AD with net ads join -U myadminusername I'm prompted for my

I'm attempting to join a samba server to a Windows 2003 Active Directory on a network I do not control. The admins are working to help me on this, but I am also attempting to be as inobtrusive as possible. To that end, I have set up a Windows PDC and another samba server (with the same configuration) on a private network to do my own testing without having to hassle the Windows admins and ask

Problem with join to Active Directory [root@clust-master samba]# net ads join -S 10.0.0.1 -U Administrator Administrator's password: [2006/05/22 10:24:05, 0] libads/ldap.c:ads_join_realm(1640) ads_add_machine_acct (clust): Type or value exists ads_join_realm: Type or value exists [root@clust-master samba]# kinit Administrator@COROD.LOCAL Password for Administrator@COROD.LOCAL: As you can

I'm setting up a windows server 2003 ADS Realm with a few samba servers associating to it, however i've found that the accounts on the DC that i use to associate samba with need to be in the administrator group otherwise the association fails. ("ads_join_realm: Insufficient access") I'm just curious what the absolute minimum privileges are on the Windows Server 2003 DC

Okay, the jist of this whole thing, I get this infamous (?) problem, I have been trying to search though the archives of samba-general on gmane and also in my archive of this list. I have only seen requests for the magical answer. Environment: W2K/W2K3 mixed ADS going Native ADS only soon. Samba 3.0.4 compiled from source on a RHEL AS30 machine. MIT Kerberos v1.3.4 also compiled from source.

Hello, I am new to samba and I am trying to set it up to be a member server of my ADS Domain. I keep getting the same error whenever I do this. At the point where I have logged in and type "net ads join <myOUname>" I get the error: "libads/ldap.c:ads_join_realm(1640) ads_add_machine_acct (my_server_name): Type or value existsads_join_realm: Type or value exists". I am

hi, you cannot use the root-principal unless it has administrative privileges, this works for me: kdestroy kinit administrator@YOURREALM net ads join bye, guenther On Thu, Nov 07, 2002 at 08:48:44PM +0200, Jaakko Niemi wrote: > > Starting program: /usr/bin/net ads join > root password: > net: /home/liiwi/cvs-foo/openldap-2.1.8/libraries/libldap/getvalues.c:97:

I upgraded my Samba alpha 21 to alpha 22 and the clients stoped accessing the shares. As I have experienced this before, I started the debugging process, until I reached the part of joining the win2k Domain. Thats where things crash with the following message: [2003/03/18 11:13:59, 1] libsmb/clikrb5.c:krb5_mk_req2(256) krb5_cc_get_principal failed (No credentials cache found) [2003/03/18

I posted about a winbind/PAM issue earlier and discovered that the auth portion of pam_winbind is what was causing my failures. I receive the following message when trying to authenticate sshd or login with the auth pam_winbind module: Jun 3 20:43:04 gonzo pam_winbind[14850]: request failed: No logon servers, PAM error was 4, NT error was NT_STATUS_NO_LOGON_SERVERS Jun 3 20:43:04 gonzo

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm using samba 3.0.0beta1. When I try join ADS I got error: # net ADS JOIN -U Administrator [2003/06/25 13:03:34, 1] param/loadparm.c:lp_do_parameter(3103) ~ WARNING: The "winbind uid" option is deprecated [2003/06/25 13:03:34, 1] param/loadparm.c:lp_do_parameter(3103) ~ WARNING: The "winbind gid" option is deprecated