Error with "samba-tool domain join"ERROR(runtime): uncaught exception - (-1073741790, 'Access denied')

[Andrew Bartlett]

On Tue, 2012-03-06 at 14:14 +1100, Andrew Bartlett wrote:
> On Mon, 2012-03-05 at 13:35 +0100, Manuel Alguacil Payán wrote:
> > When I execute the following command:
> > 
> > root# ./samba-tool domain join my.domain DC -Uadministrator --realm=my.realm
> > 
> > 
> > I get the following error:

I've reproduced this locally.  It hit Windows 2003, due to mis-detecting
the NEW_SPNEGO case due to a bug in the handler and unexpected behaviour
from our bundled copy of Heimdal.  

The attached patch will be in master soon, possibly followed by a more
elegant fix (fixing upstream Heimdal). 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-auth-kerberos-Fall-back-to-gsskrb5_get_subkey-if-we-.patch
Type: text/x-patch
Size: 1621 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20120308/5df8e561/attachment.bin>