[Samba] Problem joining a domain using ads
Robert Vangel
vangelr at rfgt.net
Sat Jun 11 10:23:24 GMT 2005
Jochen Kaechelin wrote:
> server: ms 2003 with ads
> client: debian 3.1/samba 3.0.14
>
> smb.conf:
>
[snip]
>
> krb5.conf:
>
[snip]
>
> "kinit jkt at SP-GRUPPE.DE" works with no error messages.
>
> "smbd -b | grep KRB" shows:
>
[snip]
>
> "net ads info" shows:
>
[snip]
>
> "net ads status -Ujkt" shows:
>
[snip]
>
>
> "net ads join -U jkt" shows:
>
> [2005/06/11 11:04:44, 0] libads/ldap.c:ads_add_machine_acct(1405)
> ads_add_machine_acct: Host account for laptopjkt already exists -
> modifying old account
> [2005/06/11 11:04:44, 0] libads/ldap.c:ads_join_realm(1763)
> ads_join_realm: ads_add_machine_acct failed (laptopjkt):
> Insufficient access
> ads_join_realm: Insufficient access
>
>
> what's wrong???
>
I'm not sure on the actual problem itself, but can you delete
`laptopjkt' from the Computers container and try again? Are you sure
that the jkt user has add computer priviledges. Can you try with
Administrator?
More information about the samba
mailing list