[Samba] net ads join problems

[Brian D. McGrew]

Good morning all:

When I do a net ads join from FC4 I get the following output and I'm not
quite sure what to make of it.  Also, after I do a kinit, net ads join
and smb restart all my windows clients can connect fine.  After I reboot
the server, the windows clients can not connect until I do another kinit
and net ads join.  What am I missing?

---> smb.conf file

[global]
    netbios name = madmax
    realm = MACHINEVISIONPRODUCTS.COM
    security = ads
    encrypt passwords = yes
    wins server = 10.0.0.3
    workgroup = MVP
    password server = *
    server string = Accounting Server
    log file = /var/log/samba/smbd.log
    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
    username map = /etc/samba/smbusers

[premier]
    comment = MYOB Premier
    path = /data
    browseable = yes
    writable = yes
    create mask = 0777

---> krb5.conf

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = MACHINEVISIONPRODUCTS.COM
 ticket_lifetime = 24000
 dns_lookup_realm = false
 dns_lookup_kdc = false

[realms]
 MACHINEVISIONPRODUCTS.COM = {
  kdc = chicken.visionpro.com:88
  admin_server = chicken.visionpro.com:749
  default_domain = machinevisionproducts.com
  kdc = *
 }

[domain_realm]
 .machinevisionproducts.com = MACHINEVISIONPRODUCTS.COM
 machinevisionproducts.com = MACHINEVISIONPRODUCTS.COM

[kdc]
 profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
 pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false
 }

---> net ads join output

[2005/11/10 08:11:51, 0] libads/ldap.c:ads_add_machine_acct(1405)
  ads_add_machine_acct: Host account for mustang already exists -
modifying old account
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:54, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
[2005/11/10 08:11:55, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password
MUSTANG$@MACHINEVISIONPRODUCTS.COM at MACHINEVISIONPRODUCTS.COM failed:
Preauthentication failed
Using short domain name -- MVP
Joined 'MUSTANG' to realm 'MACHINEVISIONPRODUCTS.COM'

-brian

Brian D. McGrew { brian at visionpro.com || brian at doubledimension.com }
--
> Those of you who think you know it all,
  really annoy those of us who do!