domain join stuck at Starting GENSEC submechanism gssapi_krb5 if using -U user%password

Matthieu Patou mat at samba.org
Wed Feb 1 02:42:44 MST 2012


Hello Andrew,

While debugging another problem I face this issue when I tried to join 
an existing mixed domain:

finddcs: searching for a DC by DNS domain test.samba.home.matws.net
finddcs: looking for SRV records for _ldap._tcp.test.samba.home.matws.net
finddcs: DNS SRV response 0 at '172.16.100.1'
finddcs: DNS SRV response 1 at '172.16.101.1'
finddcs: DNS SRV response 2 at '192.168.1.109'
finddcs: DNS SRV response 3 at '172.16.101.29'
finddcs: performing CLDAP query on 172.16.100.1
finddcs: Found matching DC 172.16.100.1 with server_type=0x000003fd
Found DC ares.test.samba.home.matws.net
lpcfg_servicenumber: couldn't find ldb
added interface wlan0 ip=fe80::221:5dff:fe09:6338%wlan0 
bcast=fe80::ffff:ffff:ffff:ffff%wlan0 netmask=ffff:ffff:ffff:ffff::
added interface tap1 ip=fe80::7ce1:91ff:feaa:244c%tap1 
bcast=fe80::ffff:ffff:ffff:ffff%tap1 netmask=ffff:ffff:ffff:ffff::
added interface tap0 ip=172.16.100.1 bcast=172.16.100.255 
netmask=255.255.255.0
added interface tap1 ip=172.16.101.1 bcast=172.16.101.255 
netmask=255.255.255.0
added interface wlan0 ip=192.168.1.109 bcast=192.168.1.255 
netmask=255.255.255.0
added interface wlan0 ip=fe80::221:5dff:fe09:6338%wlan0 
bcast=fe80::ffff:ffff:ffff:ffff%wlan0 netmask=ffff:ffff:ffff:ffff::
added interface tap1 ip=fe80::7ce1:91ff:feaa:244c%tap1 
bcast=fe80::ffff:ffff:ffff:ffff%tap1 netmask=ffff:ffff:ffff:ffff::
added interface tap0 ip=172.16.100.1 bcast=172.16.100.255 
netmask=255.255.255.0
added interface tap1 ip=172.16.101.1 bcast=172.16.101.255 
netmask=255.255.255.0
added interface wlan0 ip=192.168.1.109 bcast=192.168.1.255 
netmask=255.255.255.0
Starting GENSEC mechanism spnego
Starting GENSEC submechanism gssapi_krb5


Join will get stuck forever at this line.

If I use -k 1 with a valid ticket then the join occur without a problem.

Any ideas ?

Matthieu.

-- 
Matthieu Patou
Samba Team
http://samba.org



More information about the samba-technical mailing list