w2k can´t join to samba alpha12 PDC

[Andrew Bartlett]

Axel Machens wrote:
> 
> Hi samba-admins,
> 
> I have a problem to join with my W2K Professional Workstation Service
> Pack2(with SP 1 the same problem)the Samba alpha v.12 PDC.(On my 2.2.2
> version all works fine)
> 
> I have a account on samba as root (and linux) and I make root with
> smbgroupedit to: Domain Admins and Administrators, a username.map
> is with root=Administrator and domain users = @root
> 
> join to the domain with Win2000 Prof. /with Username root and passwort *******
> 
> Netzwerkidentifikation
>     ---------
> * it wasn´t a userkey for this loggin available.
> 
> ( here in german, because my english is not the best :)

You need to set 'use spnego = no' for the duration of the join.  After
that its fine, but if win2k detects us claiming to support kerberos it
attempts to use this capability :-(.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net