similar to: net ads join to w2k3 hangs, every encryption type fails

Hi! I'm having the following issue: Linux Box with RedHat 3 joining a windows 2003 AD. When doing net ads join the system reports [2007/03/12 17:27:36, 5] libads/kerberos.c:get_service_ticket(367) get_service_ticket: krb5_get_credentials for SAENET01$@ABC.COM enctype 16 failed: KDC has no support for encryption type [2007/03/12 17:27:36, 3]

The cmd 'net ads join -U username' dies with 'Segmentation fault' for our PROD ADS environment, however works fine in our DEV ADS environment! The only [Linux] configuration change between the two environments is update SAMBA and Kerberos config to read 'ADS' vs 'ADSDEV' and change the domain controller FQDN. The /var/kerberos/krb5kdc directory, samba/secrets.tdb

I just patched our domain controllers with MS06-035 because it said it was just fixing a couple of memory leak problems with SMB in srvsvc. Now, this afternoon, one of my colleagues tried to join a FC5 machine to our active directory using the recipe that we have been using for years (which worked yesterday, according to him), and it fails on "net ads join". No changes have been made

First thing - I'd like to say a big "THANK YOU" to the developers. I just upgraded to samba-3.0.23 and I've noticed an alarming issue with respect to my configuration. I've been using the built-in keytab management and it looks like the updated code no longer creates the userPrincipal in Active Directory. Whether this is an issue for others or not, it would be nice to have

Trying to do a net ads join, which has always worked fine in the past is now throwing the below errors when I try and rejoin the domain after a Windows server reboot. What am I doing wrong? :b! [2006/08/23 19:45:00, 0] libads/ldap.c:ads_add_machine_acct(1405) ads_add_machine_acct: Host account for mustang already exists - modifying old account [2006/08/23 19:45:00, 0]

Does Samba 3.0.x can be compiled on RH AS 2.1 (using glibc 2.2.4)? I can't complete the compilation! Here are the configuration options: ./configure --prefix=/usr --sysconfdir=/etc/samba \ --localstatedir=/var/samba --with-ldap --with-ads \ --with-smbmount --with-pam --with-pam_smbpass \ --with-winbind --with-configdir=/etc/samba \ --with-logbasedir=/var/log/samba \

Hi there, After configuring and doing a make of samba-3.0.15pre2 it fails with the following errors: <snip> Compiling libads/ads_status.c with -fPIC Linking nsswitch/libnss_wins.so lib/system.po: In function `sys_dlopen': lib/system.po(.text+0xd71): undefined reference to `dlopen' lib/system.po: In function `sys_dlsym': lib/system.po(.text+0xd99): undefined reference to

Hi, I'm fairly new to samba so apologies if this is an old problem.... When I try 'net ads join -U administrator' I get the following: [2007/05/22 12:15:15, 0] libads/ldap.c:ads_add_machine_acct(1368) ads_add_machine_acct: Host account for storage4 already exists - modifying old account Using short domain name -- ABSOLUTESTUDIOS [2007/05/22 12:15:15, 0]

After a lot of different problems and variations of krb5.conf and samba.conf files I am currently stuck with the following error trying to join a domain net ads join -U nfybw@UIB.NO 'Klienter\IT\MatNat\IFT\Samba Servers\IT-gruppen' nfybw@UIB.NO's password: [2004/12/02 15:34:36, 0] libads/ldap.c:ads_add_machine_acct(1367) ads_add_machine_acct: Host account for iftsmb100 already

Hello from Buenos Aires. I am getting the following error when I do the net ads join command: get_service_ticket: kerberos_kinit_password ULISES$@SYSTEMMASTER.COM.AR@SYSTEMMASTER.COM.AR failed: Preauthentication failed I am running Debian, kernel 2.4.18 (geez, I should upgrade). I searched everywhere for this error but I can?t find any solution. Wbinfo -u works fine. kinit

abrams:~# kinit admin@CORP.TCC.INET This seems to work just fine. abrams:~# net ads join "TwinCities\TTAGS\SERVERS" [2004/12/28 18:52:20, 0] libads/ldap.c:ads_add_machine_acct(1475) Warning: ads_set_machine_sd: Unexpected information received Using short domain name -- CORP [2004/12/28 18:52:23, 0] libads/kerberos.c:get_service_ticket(335) get_service_ticket: kerberos_kinit_password

Samba is trying to be a member server in an AD in native mode, using winbind, nss, and kerberose. There are 3 kdc's (2 are Win2003, 1 is Win2000), samba server is RH-AS3 + Samba version 3.0.9 (from samba.org) + krb5 1.3.1-6 (from Fedora Core). I thought I had things working (join succeeded, could access shares, modify files), and then it stopped working. After clearing out the host account

Good morning all: When I do a net ads join from FC4 I get the following output and I'm not quite sure what to make of it. Also, after I do a kinit, net ads join and smb restart all my windows clients can connect fine. After I reboot the server, the windows clients can not connect until I do another kinit and net ads join. What am I missing? ---> smb.conf file [global] netbios name

Good morning all: When I do a net ads join from FC4 I get the following output and I'm not quite sure what to make of it. Also, after I do a kinit, net ads join and smb restart all my windows clients can connect fine. After I reboot the server, the windows clients can not connect until I do another kinit and net ads join. What am I missing? ---> smb.conf file [global] netbios name

After installing Samba3.0.21c, on AIX 5.2 ML7 I get the following error trying to join a domain, can anyone offer any advice? Thanks Mark [WMSTRAIN:root]/opt/samba-3.0.21c/lib> testparm Load smb config files from /opt/samba-3.0.21c/lib/smb.conf Loaded services file OK. WARNING: passdb expand explicit = yes is deprecated Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your

Hi Guys, I'm having trouble with joining a W2K3 Native Mode Domain. Can anyone point me in the right direction to look for answers? I intslled from rc3 SRPM. When I do: net ads join DOMAIN -U domadm@REALM -d10 I get this error towards the end. Thanks, Dulantha. .... .... [2003/09/10 17:48:27, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 2 840 113554 1 2 2 3 [2003/09/10

Hello, My System: Debian woody Samba-3.0.9 build with: ./configure --prefix=/opt/samba-3.0.9 --exec-prefix=/opt/samba-3.0.9 --with-ads --with-winbind make make install if i want to join to the W2003 ADS Domain with /opt/samba/bin/net ads join -U Administrator i see the following errors Using short domain name -- TESTDOMAIN [2004/12/01 12:32:07, 0] libads/kerberos.c:get_service_ticket(335)

Question: How can I stop users from being prompted for a password? Is secrets.tdb needed? Do you think my problems are caused by having a different workgroup to realm? Problems: I've gone over samba-by-example 7.3.4.1 on setting up idmap_rid with winbind quite a few times now. I also checked what JHT has said in chapter 12. All of it seems correct. However I get loads of this before the

With samba-3.0.12-5 I can join my AD domain: net ads join -U de7b07k0@ORG1.MYDOMAIN.NET ... 2006/10/03 20:38:41, 0] libads/kerberos.c:get_service_ticket(337) get_service_ticket: kerberos_kinit_password DE70176C$@ORG1.MYDOMAIN.NET@ORG1.MYDOMAIN.NET failed: Clients credentials have been revoked [2006/10/03 20:38:41, 0] libads/kerberos.c:get_service_ticket(337) get_service_ticket:

I'm using RH9, and I have compiled samba 3.0.1 compiled from sources, > with the following options: > ./configure --with-winbind --with-winbind-auth-challenge --with-pam \ > --with-acl-support --with-ldapsam --with-pam_smbpass \ --with-ads > --with-ldap --with-dce-dfs --with-smbwrapper --enable-pam > net ads join -S server.domain.com -U support worked fine.