Samba 3.0 Alpha22 + AD Domain, RedHat Kerberos Problems

[Andrew Bartlett]

On Tue, 2003-03-11 at 13:05, ODC wrote:
> Herb Lewis wrote:
> > The bad encryption type message happens if you have never changed
> > the administrator password on the PDC and you try to join the domain.
> > Did you successfully join the domain?
> > 
> > ODC wrote:
> > 
> 
> I believe I have joined the linux machine to the domain successfully. I 
> used net ads JOIN ....
> 
> What do you mean by Administrator account password not changed ? Our 
> Domain Administrator account has had its username changed, 
> DOMAIN\Administrator does not exist anymore -- is this a problem ?

The issue is that the password of the user you are connecting to Samba
with does not have the 'upgraded' password types.  This occurs if the
user hasn't changed their password since the ADS upgrade.

The 'best' solution is to get a newer kerberos library, but MIT hasn't
released the latest kerberos, so it's up to you to get their snapshots,
or a recent heimdal.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030311/59984df0/attachment.bin