[Samba] Cannot join win2k ADS

[Alon Rubinstein]

Hi

I am having a real nightmare over this:

Setup is : win2k as ADS server

linux samba server is: 

# smbd --version
Version 3.0.14a-Ubuntu

kerberos:
# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: Administrator at KCS.COM

Valid starting     Expires            Service principal
07/03/06 09:51:51  07/03/06 19:51:51  krbtgt/KCS.COM at KCS.COM


Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

smb.conf snippets:

[global]

## Browsing/Identification ###

# Change this to the workgroup/NT-domain name your Samba server will part of
   workgroup = KCS
   netbios name  = NEWSVN

   security = ADS
   realm = KCS.COM

;   winbind separator = +

   idmap uid = 10000-20000
   idmap gid = 10000-20000
   winbind enum users = yes
   winbind enum groups = yes
   auth methods = winbind

    client use spnego = yes


    winbind use default domain = yes
    restrict anonymous = 2
   password server = donald.kcs.com


############
root at server:/etc/samba# net ads join -UAdministrator at kcs.com
Administrator at kcs.com's password:
[2006/07/03 12:49:38, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: No results returned


NET ADS JOIN:


root at server:/etc/samba# net ads join -UAdministrator at kcs.com -d 3
[2006/07/03 12:50:08, 3] param/loadparm.c:lp_load(3915)
  lp_load: refreshing parameters
[2006/07/03 12:50:08, 3] param/loadparm.c:init_globals(1329)
  Initialising global parameters
[2006/07/03 12:50:08, 3] param/params.c:pm_process(573)
  params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
[2006/07/03 12:50:08, 3] param/loadparm.c:do_section(3417)
  Processing section "[global]"
[2006/07/03 12:50:08, 2] lib/interface.c:add_interface(81)
  added interface ip=192.168.50.10 bcast=192.168.50.255 nmask=255.255.255.0
[2006/07/03 12:50:08, 2] lib/interface.c:add_interface(81)
  added interface ip=192.168.60.1 bcast=192.168.60.255 nmask=255.255.255.0
Administrator at kcs.com's password:
[2006/07/03 12:50:12, 3] libads/ldap.c:ads_connect(285)
  Connected to LDAP server 192.168.50.4
[2006/07/03 12:50:12, 1] libads/ldap.c:ads_connect(289)
  Failed to get ldap server info
[2006/07/03 12:50:12, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: No results returned
[2006/07/03 12:50:12, 2] utils/net.c:main(897)
  return code = -1


Any ideas???


Thanks,

Alon Rubinstein