[Samba] Problem joining a domain using ads

[Robert Vangel]

Jochen Kaechelin wrote:
> server:		ms 2003 with ads
> client:		debian 3.1/samba 3.0.14
> 
> smb.conf:
 >
[snip]
> 
> krb5.conf:
 >
[snip]
> 
> "kinit jkt at SP-GRUPPE.DE" works with no error messages.
> 
> "smbd -b | grep KRB" shows:
> 
[snip]
> 
> "net ads info" shows:
> 
[snip]
> 
> "net ads status -Ujkt" shows:
> 
[snip]
> 
> 
> "net ads join -U jkt" shows:
> 
> [2005/06/11 11:04:44, 0] libads/ldap.c:ads_add_machine_acct(1405)
>   ads_add_machine_acct: Host account for laptopjkt already exists - 
> modifying old account
> [2005/06/11 11:04:44, 0] libads/ldap.c:ads_join_realm(1763)
>   ads_join_realm: ads_add_machine_acct failed (laptopjkt): 
> Insufficient access
> ads_join_realm: Insufficient access
> 
> 
> what's wrong???
> 

I'm not sure on the actual problem itself, but can you delete 
`laptopjkt' from the Computers container and try again? Are you sure 
that the jkt user has add computer priviledges. Can you try with 
Administrator?