3.0.23: net ads join fails on RHEL3

Gerald (Jerry) Carter jerry at samba.org
Fri Jul 7 01:32:43 GMT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dave Daugherty wrote:

> Is it the same version of Kerberos in both cases?
> 
> Are you testing with DES bit set on Computer account? 
> If so, try removing it to see if RC4 still works okay.
> 
> What does ethereal show in the kpasswd response?

The is MIT krb5 1.2.  The difference is that the session
key in 'net rpc join' is from a NTLM session setup where as
the 'net ads join' is from a Krb5 session setup.  I wonder
if DES keys for encrypting the pw in SetUserInfo(24)
work at all.  I'll have to keep testing.





cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFErbm7IR7qMdg1EfYRAhTOAJ0T1noThfcpWJb5qNUDheN+RjWJ0wCfXFHB
WXzlWdGxKdWofqTC1cttHh0=
=/VEZ
-----END PGP SIGNATURE-----


More information about the samba-technical mailing list