[Samba] net ads join error in debug mode when joining Windows 2003 AD

Luke Skywalker jedy_luke at hotmail.com
Mon Mar 12 15:46:39 GMT 2007


Hi!
I'm having the following issue: Linux Box with RedHat 3 joining a windows 
2003 AD.

When doing net ads join the system reports

[2007/03/12 17:27:36, 5] libads/kerberos.c:get_service_ticket(367)
  get_service_ticket: krb5_get_credentials for SAENET01$@ABC.COM enctype 16 
failed: KDC has no support for encryption type
[2007/03/12 17:27:36, 3] 
libads/kerberos.c:kerberos_derive_salting_principal_for_enctype(552)
  verify_service_password: get_service_ticket failed: KDC has no support for 
encryption type
[2007/03/12 17:27:36, 10] libads/kerberos.c:verify_service_password(465)
  verify_service_password: decrypted message with enctype 1 salt 
HOST/saenet01 at ABC.COM!
[2007/03/12 17:27:36, 10] libads/kerberos.c:verify_service_password(465)
  verify_service_password: decrypted message with enctype 3 salt 
HOST/saenet01 at ABC.COM!
[2007/03/12 17:27:36, 5] libads/kerberos.c:get_service_ticket(367)

but then it ends with

Joined 'SAENET01' to realm 'ABC.COM'
[2007/03/12 17:27:36, 2] utils/net.c:main(897)
  return code = 0

and in the windows 2003 the server appears as registered.

However, when launching samba, I get the following errors

[2007/03/12 17:32:49, 3] libsmb/clikrb5.c:ads_krb5_mk_req(381)
  ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)

and when trying to authenticate with a user


check_ntlm_password:  Authentication for user [e0045146] -> [e0045146] 
FAILED with error NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
[2007/03/12 17:34:08, 3] smbd/error.c:error_packet(129)

krb5.conf and smb.conf are standard as taken from several post on internet 
which refers to
Windows 2003 AD and Samba: I pretty sure there must be some details in the 
krb5.conf for
encryption that I'm missing, but still don't know what.

Any help will be much appreciate!

Arcetrax

_________________________________________________________________
Telefona con Messenger...Le chiamate ai PC sono Gratis! 
http://get.live.com/messenger/features



More information about the samba mailing list