[Samba] Net ADS JOIN error

[Guenther Deschner]

hello alessandro,

On Thu, Feb 06, 2003 at 04:37:24PM +0100, Alessandro.Bruni at cec.eu.int wrote:
> Hi all,
> 
> After having spend 2 days to resolve my problem to configure Samba 3.0 (the
> path to the libgcc_s was wrong) I've finally installed it and I'm trying to
> join the W2K AD domain with the command:
> 
> 1. kinit admin at OUR.DOMAIN.ORG (asking password and getting the ticket from
> the W2K)
> 
> 2. net ads join -Uadmin at OUR.DOMAIN.ORG (doesn't work)
> 
> error message :
...
> [2003/02/06 15:09:08, 1] libsmb/clikrb5.c:krb5_mk_req2(234)
>   krb5_get_credentials failed for s-tnet1luxdc01$@OUR.DOMAIN.INT (No
> credentials found with supported encryption types)

can you post your krb5.conf and tell us what flavour of kerberos you use
(mit or heimdal), sorry if you have posted these infos before but i did
not follow the whole thread.

on my host (samba3cvs, SuSE Linux 8.1, heimdal) you need:

[libdefaults]
        default_etypes = des-cbc-crc des-cbc-md5
        default_etypes_des = des-cbc-crc des-cbc-md5

with mit you should have (at least i guess that):
        default_tkt_enctypes = des-cbc-crc des-cbc-md5
        default_tgs_enctypes = des-cbc-crc

can you possibly try that? and you did change the password of
admin at OUR.DOMAIN.ORG once after your win2k dcs was set up?

bye,
guenther
-- 
Guenther Deschner                                         gd at suse.de
SuSE Linux AG                                        GnuPG: 8EE11688
Berliner Str. 27                      phone:  +49 (0) 30 / 430944778
D-13507 Berlin                           fax:  +49 (0) 30 / 43732804
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba/attachments/20030207/2e4eba29/attachment.bin