[Samba] kinit succeeded but ads_sasl_spnego_krb5_bind failed

[Francis Lee Mondia]

Hi all,

I'm having trouble joining samba to active directory. My samba version is
3.0.28a-35 and krb is  1.6.1-17.el5. It's running on centos 5, kernel
version 2.6.18-53.1.14.el5. It's running on vmware server by the way if that
is of any significance.

The specific error that I get are as follows:

when testjoining the domain:

[2008/03/18 04:34:07, 0] libads/kerberos.c:ads_kinit_password(228)
  kerberos_kinit_password AD2K7$@DOMAIN.COM failed: Preauthentication failed
Join to domain is not valid: Logon failure

<DOMAIN.COM> is a valid domain, on a windows 2003 r2 server. It's already
added to the hosts file as well as configured as the DNS server. hostname of
this host can also be resovled.

This is strange, considering I can get the ticket using kinit. I know some
people have posted about this before, but it was on a previous samba
version. I don't know if it is with samba versions, but i also upgraded from
3.0.25b, since i found somewhere in this post that it's a buggy version.

On last thing, I also got the same problem on a Centos 4.4 installation,
also with installed 3.0.28a-35.

Any help will be highly appreciated. I'm willing to give you all the
required configuration files if you need it.