[Samba] Re: Problem joining into ads

Franz Pfoertsch franz.pfoertsch at brose.net
Fri Jun 2 12:43:38 GMT 2006


Franz Pfoertsch wrote:

> here are the logs from net ads and the smb.conf!
> 
> regards
> Franz
> 
> Guenther Deschner wrote:
> 
>> Can you please send the output of the join command with "-d 10" ?
>> 
>> Thanks,
>> Guenther
In the meantime I didn't found a solution!

I tried a lot (changing kernel, looking at the timesync, upgrade to samba
3.0.22 SerNet but nothing helps.

I recognized only one thing,

when I do a "net ads testjoin", the server told me:
--snip--
  kerberos_kinit_password HOLU0001$@BROSE.NET failed: Preauthentication
failed
[2006/06/02 14:30:31, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: Preauthentication failed
Join to domain is not valid
--snip--

look at the hostname, he is in capital letters.
When I do a net ads status I got lowercase letters!

--snip--
holu0001:/etc # net ads status
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
objectClass: computer
cn: holu0001
distinguishedName: CN=holu0001,CN=Computers,DC=brose,DC=net
instanceType: 4
whenCreated: 20060602122701.0Z
whenChanged: 20060602122701.0Z
uSNCreated: 125380896
uSNChanged: 125380897
name: holu0001
objectGUID: 45ecb67b-bc5c-4e80-9cb7-a368c33dc85e
userAccountControl: 69632
badPwdCount: 10
codePage: 0
countryCode: 0
badPasswordTime: 127937250312797850
lastLogoff: 0
lastLogon: 0
localPolicyFlags: 0
pwdLastSet: 0
primaryGroupID: 515
objectSid: S-1-5-21-160562036-3150058255-2134394716-251845
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: holu0001$
--snip--

sAMAccountType: 805306369
operatingSystem: Samba
operatingSystemVersion: 3.0.22-SerNet-SuSE
dNSHostName: holu0001.brose.net
userPrincipalName: HOST/holu0001 at BROSE.NET
servicePrincipalName: CIFS/holu0001.brose.net
servicePrincipalName: CIFS/holu0001
servicePrincipalName: HOST/holu0001.brose.net
servicePrincipalName: HOST/holu0001
objectCategory: CN=Computer,CN=Schema,CN=Configuration,DC=brose,DC=net
isCriticalSystemObject: FALSE
--snip--

any ideas?

I need this server next week.

regards
Franz








More information about the samba mailing list