[Samba] joining to domain breaks kerberos authentication

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Russell Davies wrote:
> Hi All,
> 
> I'm running samba-3.0.23b compiled  on a Solaris 10
> system compiled against MIT kerberos. I am experiencing
> odd behaviour where joining the machine to the domain
> using 'net rpc join' seems to break the kerberos principal
> tickets and regular user authentication via kerberos ceases
> to work.

'net rpc join' does not register the machine SPN values
in AD.  If you specify 'security = ads', then use 'net ads
join' (or even 'net join' will do the right thing).





cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE9cVHIR7qMdg1EfYRAitKAJ0StgsLy1QSN+apvGRrCD/Zl/YsBgCg8o+3
JHG6U65xTVufrHZiQbM7QnM=
=wAE7
-----END PGP SIGNATURE-----