[Samba] "net ads keytab create" failing

Michael Schurter michael at susens-schurter.com
Fri Nov 10 16:08:01 GMT 2006

Hi all,

At my new job I'm able to use Linux, but I need it to integrate it as
tightly as possible with the organizations ActiveDirectory network.  So
of course I've been working with samba, winbind, and pam_krb5 a lot over
the past few days.

One problem I'm running into is that running "net ads keytab create"
fails with the error: "ads_connect: Operations error"

Any clue what I'm doing wrong?

Michael Schurter


OS: Debian Etch w/ Samba 3.0.23c-3 & krb5 1.4.4-3
Command executed: sudo net -d10 ads -U michael keytab create
  (where michael is my local & domain username)

Relevant results (last few lines):
[2006/11/10 09:51:02, 3] libads/ldap.c:ads_connect(287)
  Connected to LDAP server
[2006/11/10 09:51:17, 0] utils/net_ads.c:ads_startup(281)
  ads_connect: Operations error
[2006/11/10 09:51:17, 2] utils/net.c:main(988)
  return code = -1

I do *not* yet have "use kerberos keytab" set to true in my smb.conf
file (wanted this to succeed first).

I've been blogging my experience, so for configuration file details you
can just look here: http://michael.susens-schurter.com/blog
(Sorry for shameless promotion, but its easier than copying & pasting in
dozens of lines.)

More information about the samba mailing list