[Samba] Failed to join domain: failed to set machine spn: Constraint violation

[Alex Green]

Cross-wires (.....)

AD record update (SPN or DNS) failing absolutely the right thing to do ... no question.

DDNS Fail - disable option would be good ... only talking about this... not the AD bit...



-----Original Message-----
From: Gerald (Jerry) Carter [mailto:jerry at samba.org]
Sent: 16 December 2008 12:36
To: Alex Green
Cc: samba at lists.samba.org
Subject: Re: [Samba] Failed to join domain: failed to set machine spn: Constraint violation

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alex,

> 3.0.28 and 3.0.32 - Native OS version shipped by Novell(Linux) and Sun(Solaris)
>
> Failing is the right thing to do in an MS-DNS/AD-Integrated
> environment, however for non-MS DNS environments disabling is
> going to be cleaner.

Failing is the right thing to do period because without setting
the attributes you can't do Krb5 auth.  Maybe you should be using
"security = domain" instead.







cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJR6DIIR7qMdg1EfYRAgIMAKC6kaIxLU+v7jwWKK4UEOF/CS+dSgCg2qTh
a2Ni1L3EkpPweglM5p1gG2g=
=ifuH
-----END PGP SIGNATURE-----