[Samba] "net ads keytab create" failing

[Michael Schurter]

Hi all,

At my new job I'm able to use Linux, but I need it to integrate it as
tightly as possible with the organizations ActiveDirectory network.  So
of course I've been working with samba, winbind, and pam_krb5 a lot over
the past few days.

One problem I'm running into is that running "net ads keytab create"
fails with the error: "ads_connect: Operations error"

Any clue what I'm doing wrong?

Michael Schurter

Details:

OS: Debian Etch w/ Samba 3.0.23c-3 & krb5 1.4.4-3
Command executed: sudo net -d10 ads -U michael keytab create
  (where michael is my local & domain username)

Relevant results (last few lines):
[2006/11/10 09:51:02, 3] libads/ldap.c:ads_connect(287)
  Connected to LDAP server 192.168.100.6
[2006/11/10 09:51:17, 0] utils/net_ads.c:ads_startup(281)
  ads_connect: Operations error
[2006/11/10 09:51:17, 2] utils/net.c:main(988)
  return code = -1

I do *not* yet have "use kerberos keytab" set to true in my smb.conf
file (wanted this to succeed first).

I've been blogging my experience, so for configuration file details you
can just look here: http://michael.susens-schurter.com/blog
(Sorry for shameless promotion, but its easier than copying & pasting in
dozens of lines.)