[Samba] Can't Join Samba as a DC to an Existing Domain

[Andrew Bartlett]

On Wed, 2015-07-01 at 09:29 +0800, Sarah Lee wrote:
> Hello all,
> 
> I keep try to join existing domain as DC, but still cannot
> 
> our main dc show error :
> Unable to encrypt unicodePwd in DRS object - WERR_DS_DRA_INVALID_PARAMETER
> 
> for information our samba is 4.0.1 and i had upgrade to 4.0.23
> 
> Please help, how to resolve this..

That is a very interesting error.  Looking over the code, it appears
that the unicodePwd has been corrupted somehow. 

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba