[Samba] New trick for old dogs

[Baker, Darryl]

We have been using Samba for many years. The company has just switched from an NT domain to an  Active Directory domain. The new server is running Windows Server 2003. We are having trouble configuring our Solaris 8 server so it can join the domain as a server. Just getting Samba to compile and link was interesting enough. This included downloading and compiling a new version of the BerkeleyDB, libiconv, OpenLDAP, and Kerberos. Now that I have a compiled version I'm having trouble joining the domain. Just to make life interesting the terms in the error messages are not in terms our Windows admins understand and no one here is familiar with Kerberos. First is there a table match Kerberos terms with M$ Windows terms? Next what does this error mean?

# /usr/local/samba/bin/net ads join GEDAS-US -S gdusrhd0002 -U sambajoin
sambajoin's password:

[2006/02/08 10:07:30, 0] libads/kerberos.c:ads_kinit_password(164)
  kerberos_kinit_password sambajoin at US.GEDAS-GRP failed: Preauthentication failed
[2006/02/08 10:07:30, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: Preauthentication failed
# 

_____________________________________________________________________
Darryl Baker
Senior Unix Specialist
gedas USA, Inc.
Operational Services Business Unit
3800 Hamlin Road
Auburn Hills, MI 48326
US
phone	+1-248-754-5341
fax	+1-248-754-6399
Darryl.Baker at gedas.com
http://www.gedasusa.com
_____________________________________________________________________