[Samba] SAMBA_CLIENT1$@DOMAIN.LOCAL@DOMAIN.LOCAL failed: Preauthentication failed

Rex Dieter rdieter at math.unl.edu
Mon May 16 19:40:53 GMT 2005

Rex Dieter wrote:

> I'm seeing a lot of:
> [2005/05/16 08:35:46, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
>    Username DOMAIN\SAMBA_CLIENT1$ is invalid on this system
> in the logs on my samba server after joining our ad DOMAIN, and
> accessing from SAMBA_CLIENT1 (also a member of the ad DOMAIN).
> Otherwise, it appears to be functioning well.
> Is this something to be worried about?

OK, now after having some more wierdness, I tried re-joining our domain, and
now I get:

# net ads join 
[2005/05/16 14:37:04, 0] libads/ldap.c:ads_add_machine_acct(1405)
  ads_add_machine_acct: Host account for SAMBA_CLIENT1 already exists -
modifying old account
Using short domain name -- DOMAIN
[2005/05/16 14:37:20, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
SAMBA_CLIENT1$@DOMAIN.LOCAL at DOMAIN.LOCAL failed: Preauthentication failed
Joined 'SAMBA_CLIENT1' to realm 'DOMAIN.LOCAL'

except it doesn't work.

Is this something wrong with samba or with AD?  (This same setup was working
a couple of days ago).

-- Rex

More information about the samba mailing list