"net ads join" returns confusing message 'Failed to join domain: Success'

[Jeremy Allison]

On Thu, Aug 02, 2007 at 06:49:58PM +0200, Kurt Pfeifle wrote:
> I spent many hours this afternoon hunting for a bug or a config error
> from my side... but it seems to turn out that everything is OK. See
> yourself:
> 
> 17:01 nfsboss: # echo $PS1
>    \A \h: #
> 
> 17:01 nfsboss: # testparm -vs|grep "log level"
>    Load smb config files from /etc/samba/smb.conf
>    [....]
>    Processing section "[nx-software]"
>    Loaded services file OK.
>    Server role: ROLE_DOMAIN_MEMBER
>            log level = 3
> 
> 17:01 nfsboss: # net ads join -W INFOM4 -S 10.162.2.53 -U "Administrator%somepassword"
>    Using short domain name -- INFOM4
>    [2007/08/02 17:01:53, 0] utils/net_rpc_join.c:net_rpc_join_ok(70)
>    net_rpc_join_ok: failed to get schannel session key from server PWC03.infom4.intern for domain INFOM4. \
>         Error was NT_STATUS_ACCESS_DENIED
>    Failed to verify membership in domain!
>    Failed to join domain: Success

> In any case: could that message "Failed to join domain: Success" be
> changed to some string that is more easily parseable and understood by
> mere mortals like me?   :-)

That looks like the join succeeded, but the check that we joined
failed. Strange..... Can you reproduce with a debug level 10 ?

Jeremy.