Error with "samba-tool domain join"ERROR(runtime): uncaught exception - (-1073741790, 'Access denied')

Andrew Bartlett abartlet at
Wed Mar 7 22:21:15 MST 2012

On Tue, 2012-03-06 at 14:14 +1100, Andrew Bartlett wrote:
> On Mon, 2012-03-05 at 13:35 +0100, Manuel Alguacil Payán wrote:
> > When I execute the following command:
> > 
> > root# ./samba-tool domain join my.domain DC -Uadministrator --realm=my.realm
> > 
> > 
> > I get the following error:

I've reproduced this locally.  It hit Windows 2003, due to mis-detecting
the NEW_SPNEGO case due to a bug in the handler and unexpected behaviour
from our bundled copy of Heimdal.  

The attached patch will be in master soon, possibly followed by a more
elegant fix (fixing upstream Heimdal). 

Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-auth-kerberos-Fall-back-to-gsskrb5_get_subkey-if-we-.patch
Type: text/x-patch
Size: 1621 bytes
Desc: not available
URL: <>

More information about the samba-technical mailing list