Adding Samba3 machine to Samba4-Alpha10

Sassy Natan sassyn at gmail.com
Thu Dec 10 13:12:35 MST 2009


Hi All

When adding a samba3 machine to samba4 alpha10

Using net ads join -U Administrator -S DC
I'm getting:

[2009/12/10 14:49:14,  0] libads/sasl.c:819(ads_sasl_spnego_bind)
kinit succeeded but ads_sasl_spnego_krb5_bind failed: Invalid credentials
Failed to join domain: failed to connect to AD: Invalid credentials
the samba3 has kerberos configured (kinit work) and also dns is point to the
bind on the samba4 server

on the samba4 server i'm getting:
Starting GENSEC submechanism gssapi_krb5
GSS Update(krb5)(1) Update failed:  Miscellaneous failure (see text): Failed
to find DC$@DOMAIN.LOCAL(kvno 9) in keytab FILE:/opt/private/secrets.keytab
(arcfour-hmac-md5)
SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE
SPNEGO login failed: NT_STATUS_LOGON_FAILURE
UnbindRequest
Terminating connection - 'NT_STATUS_END_OF_FILE'
Terminating connection - 'NT_STATUS_END_OF_FILE'
single_terminate: reason[NT_STATUS_END_OF_FILE]


windows 7 give the same
didn't try yet windows 2000,xp etc...


In Samba4 Alpha8 that was working great!

(I did manage to join to the domain with net rpc but winbind seems to work
very slow, In alpha8 with the same winbind configuration on samba3 machine
that was working very fast))
Any Ideas?


Thanks
Sassy


More information about the samba-technical mailing list