net ads join fails with NT_STATUS_WRONG_PASSWORD

[Christopher Mason]

Hello.

Attempts to join an AD domain fail with NT_STATUS_WRONG_PASSWORD 
under both samba-3.0.24-10.fc7 and samba-3.0.25-3.rc1.  I've tried 
both precreating the computer account via Users and Computers and 
not.  Note that we have a disjoint namespace (AD 
domain=mfad.mfroot.org, DNS domain=mayo.edu).  This is against win2k3.

Command is:

net ads join -d5 "createcomputer=Research/MCR/Resources/SAMBA Servers 
-- LABS/MPRC" -S mfadir09.mfad.mfroot.org -Ucjm37

Note that this has worked with previous versions (probably with 
3.0.24-1).

Note also that 3.0.25 prompts for a password where previous versions 
did not (just used my existing kerberos ticket).

Note further that I'm able to kinit, and I do get a service ticket 
for the AD server.

I've put some debug output below.  I have full traces, etc. and can 
send or post but would prefer (due to password issues, length) to not 
send to the open list.

Any help would be most appreciated,

-c


[2007/04/19 18:51:17, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770)
  rpc_api_pipe: Remote machine MFADIR09.mfad.mfroot.org pipe \samr 
fnum 0x4001
[2007/04/19 18:51:17, 5] lib/util.c:show_msg(484)
[2007/04/19 18:51:17, 5] lib/util.c:show_msg(494)
  size=647
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=8
  smb_flg2=51201
  smb_tid=2048
  smb_pid=1850
  smb_uid=2048
  smb_mid=17
  smt_wct=16
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=  565 (0x235)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]= 4280 (0x10B8)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=   82 (0x52)
  smb_vwv[11]=  565 (0x235)
  smb_vwv[12]=   82 (0x52)
  smb_vwv[13]=    2 (0x2)
  smb_vwv[14]=   38 (0x26)
  smb_vwv[15]=16385 (0x4001)
  smb_bcc=580
[2007/04/19 18:51:17, 5] lib/util.c:show_msg(484)
[2007/04/19 18:51:17, 5] lib/util.c:show_msg(494)
  size=84
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51205
  smb_tid=2048
  smb_pid=1850
  smb_uid=2048
  smb_mid=17
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   28 (0x1C)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=   28 (0x1C)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=29
[2007/04/19 18:51:17, 5] lib/util.c:show_msg(484)
[2007/04/19 18:51:17, 5] lib/util.c:show_msg(494)
  size=84
  smb_com=0x25
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51205
  smb_tid=2048
  smb_pid=1850
  smb_uid=2048
  smb_mid=17
  smt_wct=10
  smb_vwv[ 0]=    0 (0x0)
  smb_vwv[ 1]=   28 (0x1C)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=   56 (0x38)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=   28 (0x1C)
  smb_vwv[ 7]=   56 (0x38)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_bcc=29
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_debug(84)
  000000 smb_io_rpc_hdr rpc_hdr
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint8(616)
      0000 major     : 05
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint8(616)
      0001 minor     : 00
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint8(616)
      0002 pkt_type  : 02
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint8(616)
      0003 flags     : 03
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint8(616)
      0004 pack_type0: 10
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint8(616)
      0005 pack_type1: 00
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint8(616)
      0006 pack_type2: 00
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint8(616)
      0007 pack_type3: 00
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint16(677)
      0008 frag_len  : 001c
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint16(677)
      000a auth_len  : 0000
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint32(706)
      000c call_id   : 0000000b
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_debug(84)
  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint32(706)
      0010 alloc_hint: 00000004
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint16(677)
      0014 context_id: 0000
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint8(616)
      0016 cancel_ct : 00
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_uint8(616)
      0017 reserved  : 00
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_debug(84)
  000000 samr_io_r_set_userinfo
[2007/04/19 18:51:17, 5] rpc_parse/parse_prs.c:prs_ntstatus(765)
      0000 status: NT_STATUS_WRONG_PASSWORD
Failed to set password for machine account (NT_STATUS_WRONG_PASSWORD)
[2007/04/19 18:51:17, 5] lib/util.c:show_msg(484)
[2007/04/19 18:51:17, 5] lib/util.c:show_msg(494)
  size=35
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51205
  smb_tid=2048
  smb_pid=1850
  smb_uid=2048
  smb_mid=18
  smt_wct=0
  smb_bcc=0
[2007/04/19 18:51:17, 5] lib/util.c:show_msg(484)
[2007/04/19 18:51:17, 5] lib/util.c:show_msg(494)
  size=35
  smb_com=0x71
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51205
  smb_tid=2048
  smb_pid=1850
  smb_uid=2048
  smb_mid=19
  smt_wct=0
  smb_bcc=0
[2007/04/19 18:51:17, 1] utils/net_ads.c:net_ads_join(1548)
  call of net_join_domain failed: Wrong Password

-- 
[ Christopher Mason  MPRC Bioinformatics  http://proteomics ]