Fallback to NTLMSSP allowed if KDC is not reachable?

[Andreas Schneider]

On Friday, 30 April 2021 03:38:44 CEST Shilpa K via samba-technical wrote:
> Hello,
> 
> In one instance, port 88 was blocked while port 445 and port 139 were
> allowed on the DC. In this scenario, when we tried to execute 'net ads join
> -k', it was not working. But, with the below code modification, it will
> fallback to NTLMSSP and works. Is it expected to fallback to NTLMSSP in net
> ads commands if krb does not work?

'net ads join -k' without specifying a user/password, means that kerberos is 
required!

If you specify a username/password it will fall back to an alternative.

-- 
Andreas Schneider                      asn at samba.org
Samba Team                             www.samba.org
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D