[Samba] Samba3.0Alpha21- error on logging in to KDC

[mandy.tang at wesoft.com.hk]

Hi,

I have found the solution:
Because any account that is present before an "DC promotion" requires that
the password be changed such that the DES keys can be generated. As the
"administraotr account" is created prior to DC promotion, I need to change
the administrator password at least once after DC promotion. After changing
the password, the problem solved.

Thanks & Regards,
Mandy




-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 28 Nov 2002 mandy.tang at wesoft.com.hk wrote:

> Hi all,
>
> I have just downloaded and tested with the Samba3.0 Alpha21 Release. I
want
> to try to create the server account in the active directory, however,
>  when I logged in to the KDC by "/usr/kerberos/bin/kinit
> administrator at xxx.com", but error returned as
>
> "KDC has no support for encryptions type while getting the initial
> credentials" , then I can't go on for creating the acount.

Make sure that

             default_tkt_enctypes = des-cbc-md5 des-cbc-crc

is set in /etc/krb5.conf





cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2         "SAMS Teach Yourself Samba in 24 Hours" 2ed
 "You can never go home again, Oatman, but I guess you can shop there."
                            --John Cusack - "Grosse Point Blank" (1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE95gSQIR7qMdg1EfYRAu9oAJ4zXBuHiT7+yTpKavfgbf9hTCXD5ACcCTh9
boGFXzwXAalRqQuui9hLsuk=
=ypQB
-----END PGP SIGNATURE-----