Samba-3.0.7-1.3E Active Directory Issues

Markus Moeller huaraz at
Tue Nov 9 23:22:15 GMT 2004


yes correct.  With the MS ktpass it would be:
ktpass /ou file /desonly /crypto des-cbc-md5 /ptype krb5_nt_srv_hst /mapuser 
testserver-host$ /princ host/ at MYREAL.COM. 
This will be mapped to a computer account testserver-host with 
sAMaccountname testserver-host$.


"Luke Howard" <lukeh at> wrote in message 
news:200411092307.iA9N76OP096401 at
>>I got some details from MS of how the salt has changed for computer 
>>in 2003:
>>In 2003 (not sure if it is SP1) computer accounts and only computer 
>>take the following salt:
>>1) For a principal host/ at MYREALM.COM 
>>to testserver-host the salt is:
> When you say "mapped", do you mean the computer object's SAM account name 
> is
> testserver-host$ and it has a servicePrincipalName of
> host/ Or something else?
> -- Luke
> --

More information about the samba-technical mailing list