similar to: Problems viewing shares on a SAMBA/Windows 2003 ADS setup

We recently switched our win2k domain to a native mode. We upgraded our Solaris 9 samba server from 2.2.8 to version 3.0.2a and configured MIT Kerberos version 1.3.2 I was able to join to machine as a domain member without any problems: ./net ads join -U moshe moshe password: [2004/03/30 13:26:46, 0] libads/ldap.c:ads_add_machine_acct(1006) Host account for shark already exists - modifying old

ok here's the situation; i've done this on 7 servers same either SLES 9 or 10, and all those work. i have a problem server though which is SLES v9 (same versions of all daemons/services that would be used) and this one just wont allow AD auth to work i can restart all smb, nmb, winbind, and ssh servers with no errors *Note: all the needed configuratoin file snippets are at the end of

[originally posted to fedora-users] I'm having difficulty getting samba/winbind to authenticate of a W2K3 box. I've searched the list archives and although there are some similar problems, none have seemed to help resolve this one. Here's the network configuration: - Windows 2003 Server gx270-rmaniar [192.168.0.100] - Fedora Core 3 gx280rmaniarFC3 [192.168.0.5] FYI: A Windows XP box

server: ms 2003 with ads client: debian 3.1/samba 3.0.14 smb.conf: .. [global] workgroup = SP-GRUPPE password server = 10.85.117.150 realm = SP-GRUPPE.DE encrypt passwords = no server string = %h server (Samba %v) obey pam restrictions = yes passdb backend = tdbsam, guest passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .

SLES 9 SP2 samba-3.0.14a-0.4 heimdal-lib-0.6.1rc3-55.15 samba-winbind-3.0.14a-0.4 pam-modules-9-18.10 pam_krb5-1.3-201.7 I've been searching for days for a concrete answer to this question: Is it possible to join an ADS domain from a Linux Samba server without having Administrator privileges? Yes or No. If so exactly what are the minimal requirements for joining the Linux box to the

I've been working on getting Samba 3.0.4-2 to join our test W2k3 Active Directory for most of the day. When I try to join with this command : net ads join -U w702a-palmadesso "w702\NonCatComputers" According to my official Samba HowTo Book this should join the domain specified in my smb.conf. Instead I get the following output : [root@w72l-tux samba]# net ads join -U

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ~ /usr/bin/net ads join -Udennisb dennisb password: [2004/11/02 17:31:56, 0] libads/ldap.c:ads_add_machine_acct(1006) ~ Host account for if-srv-hos1 already exists - modifying old account [2004/11/02 17:31:56, 0] libads/ldap.c:ads_join_realm(1342) ~ ads_add_machine_acct: No such object ads_join_realm: No such object Also: net user | wc -l reports

My agency is moving all users and computers to a new domain. Our current domain uses AD and the new domain will use AD. My current samba servers are running 3.0.20a with ADS security with winbind on Debian Stable (Sarge) with no problems. I set up a test samba server using 3.0.20b, the new krb5.conf and smb.conf. kinit works fine. ("Authenticated to Kerberos v5") I prestage the server

Hi, I'm fairly new to samba so apologies if this is an old problem.... When I try 'net ads join -U administrator' I get the following: [2007/05/22 12:15:15, 0] libads/ldap.c:ads_add_machine_acct(1368) ads_add_machine_acct: Host account for storage4 already exists - modifying old account Using short domain name -- ABSOLUTESTUDIOS [2007/05/22 12:15:15, 0]

I'm trying to join a Samba 3.0.4 (compiled from source on Debian) to an Active Directory as a member server. I believe Kerberos is configured correctly as kinit creates a ticket for the realm. Executables appear to have support for Kerberos and LDAP (smbd -b | grep KRB and grep LDAP) return OK. When I try to join the AD with net ads join -U myadminusername I'm prompted for my

Hi, I am having problems configuring my Centos 4 server as an ADS domain member of our 2003 AD. I've followed the instructions on samba.org and did quite a bit of Google'ing and haven't found an answer to the problems. Basically I used the configuration illustrated in this section of the howto, and of course a number of other suggestions I've found along the way:

After a lot of different problems and variations of krb5.conf and samba.conf files I am currently stuck with the following error trying to join a domain net ads join -U nfybw@UIB.NO 'Klienter\IT\MatNat\IFT\Samba Servers\IT-gruppen' nfybw@UIB.NO's password: [2004/12/02 15:34:36, 0] libads/ldap.c:ads_add_machine_acct(1367) ads_add_machine_acct: Host account for iftsmb100 already

I've upgraded my pdc to 2000 (compatibility mode with nt), and I want the linux server to communicate directly with ADS... I've changed my smb.conf, and try net ads join -UAdministrator But I get the following error : borealis:/var/lib/samba# net ads join -UAdministrator Administrator's password: [2005/03/15 15:47:20, 0] libads/ldap.c:ads_add_machine_acct(1368)

Hello all, I'm not too sure we're having an ADS issue or not. Perhaps someone could shed some light on this for us? Here's what we're seeing during a net join: 14:32 myhost<42> sudo ./net join -S domaincontroller -U admin_user Admin_user password: [2004/05/05 14:33:39, 0] libads/ldap.c:ads_add_machine_acct(1006) Host account for myhost already exists - modifying old

I get this error message when trying to add my Samba 3.0.8 machine to a windows 2000 ADS. I've searched the forums and the web for anyone else with this error with no luck. net ads join -U Administrator Administrator's password: [2004/11/22 13:38:58, 0] libads/ldap.c:ads_add_machine_acct(1366) ads_add_machine_acct: Host account for jeeves2 already exists - modifying old account Using

Hi I am having trouble joining a Samba 3.0.22 (Ubuntu 6.06) machine to an AD. I have done a heap of googling and can't find anything that seems to fix the problem. This sequence of commands shows the problem (I have now tried to join the doain a number of times hence the modifying old account): # net ads join [2006/11/01 15:32:56, 0] libads/ldap.c:ads_add_machine_acct(1414)

Hi all, Thus far, I have managed to get wbinfo -[u|g] to display users/group correctly, and getent passwd/group works. However, wbinfo -t fails to work, giving me this error: [root@billing samba]# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_ACCESS_DENIED (0xc0000022) Could not check secret Further, this seems to be related to a problem with wbinfo -a:

Hello, I'm trying to authenticate all our linux machines to our ADS domain. As of now, I'm still in the process of setting up all the individual components before pushing the setup out. I've made quite a bit of progress, but I've hit a hitch when trying to add the machine's service principals (the 'host' primary specifically) to its keytab. I've searched, but I

Hello, I use Samba 3.0.22 on a Solaris 8 system. I have configured and compiled it myself: CFLAGS='-I /opt/local/openldap/include' ; export CFLAGS LDFLAGS="-L/opt/local/openldap/lib, -R/opt/local/openldap/lib" ; export LDFLAGS CPPFLAGS="-IL/opt/local/openldap/include" ; export CPPFLAGS LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/local/openldap/lib ; export LD_LIBRARY_PATH

I have been trying for two weeks to get onto a Win2k domain which has active directory with no success. The Suse YAST samba client will not do ADS, only domain, server, or user, so I went to the command line stuff I found the the Samba documentation. I can do kinit and get back the following: sha-linux:/etc/samba # kinit art_fore@3MTS.COM art_fore@3MTS.COM's Password: kinit: NOTICE: