kerberos_kinit_password Preauthentication failed

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Herb Lewis wrote:
> I sometimes get this error after a net ads join. wbinfo -t will
> fail with NT_STATUS_ACCESS_DENIED. and net ads testjoin will
> return that error but say the join is OK. If I rejoin the domain
> (or I think sometimes if I just wait long enough - several minutes)
> wbinfo -t will then work. It all seems to be related to what kdc
> is listed first in the krb5.conf file but I'm not positive.
> 
> What causes this error. Is is just something to do with the sync
> time between the various kdc's in the domain?

Yup.  What release are you working with?  This was tested pretty
heavily in the v3-0 code.  I haven't had a chance to do the same
testing since libnet was introduced for the domain join process
in v3-2.





cheers, jerry
- --
=====================================================================
Samba                                    ------- http://www.samba.org
Likewise Software          ---------  http://www.likewisesoftware.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJGG/+IR7qMdg1EfYRAmRTAJ9ZRvGNwCrrS4HGJOncUCloMX4L0gCeOspv
A82yqs67pIhVNUu5I1k2+yQ=
=KX3K
-----END PGP SIGNATURE-----