Progress on the Kerberos domain join

[Andrew Bartlett]

As I mentioned in the news on the 'long name' join, we are making
progress with WinXP joining Samba4 as an ADS domain.

Currently, the domain join breaks down at the Kerberos/SPNEGO DRSUAPI
bind.  This is the same point that metze is working on for the Win2k3 DC
join, except that it appears that for WinXP, the problematic 'DCE_STYLE'
Kerberos flag is not net.   (metze is trying to join a Win2k3 server as
a DC, so as to exersise replication functionality, and is also blocked
at this point, but with that flag set).  

I get 'Access Denied' in the WinXP domain join GUI.

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20050122/b93fd8a6/attachment.bin