[Samba] no ads join with samba3-3.0.23 whereas 3.0.12-5 works

Norbert Wegener nw at sbs.de
Tue Oct 3 18:51:39 GMT 2006


With samba-3.0.12-5 I can join my AD domain:
net ads join -U de7b07k0 at ORG1.MYDOMAIN.NET
...
2006/10/03 20:38:41, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password 
DE70176C$@ORG1.MYDOMAIN.NET at ORG1.MYDOMAIN.NET failed: Clients 
credentials have been revoked
[2006/10/03 20:38:41, 0] libads/kerberos.c:get_service_ticket(337)
  get_service_ticket: kerberos_kinit_password 
DE70176C$@ORG1.MYDOMAIN.NET at ORG1.MYDOMAIN.NET failed: Clients 
credentials have been revoked

Joined 'DE70176C' to realm 'ORG1.MYDOMAIN.NET'

Just installing samba3-3.0.23c-30 from 
ftp.sernet.de/pub/samba/suse/suse93-i386  I cannot join any further:

net ads join -U de7b07k0 at ORG1.MYDOMAIN.NET
de7b07k0 at ORG1.MYDOMAIN.NET's password: Using short domain name -- ORG1
Failed to set servicePrincipalNames. Please ensure that
the DNS domain of this server matches the AD domain,
Or rejoin with using Domain Admin credentials.
Disabled account for 'DE70176C' in realm 'ORG1.MYDOMAIN.NET'

When I reinstall the older version I can rejoin again.
Did there any options change between the versions?
What do I have to do to make the join work in the new version?
Thanks
Norbert






More information about the samba mailing list