Hi all,

I'm trying to add a samba 3.0.14a server (on Solaris 9 w/kerberos5 v1.4.1 & OpenLDAP) to a Windows 2000 AD OU and I'm able to successfully run "/apps/krb5/bin/kinit [EMAIL PROTECTED]" but when I run ... net ads join "PATH\TO\THE\RIGHT\SUB\OU" I keep getting the following error message:

libads/kerberos.c:get_service_ticket(337) get_service_ticket [EMAIL PROTECTED]@NA.EXAMPLE.NET failed: Preauthentication failed

Here is an example of what I have in my smb.conf file.
       security = ads
       realm =  na.example.net
       encrypt passwords = yes
       use kerberos keytab = yes
       netbios name = havok
       workgroup = naex
       password server = dc.server1.ip.addr  dc.server2.ip.addr
      wins server = <ip addr>

I have an unmodified krb5.conf file, klist reports the following.

Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]

Valid starting     Expires            Service principal
08/24/05 14:06:40  08/25/05 00:06:43  krbtgt/[EMAIL PROTECTED]
       renew until 08/25/05 14:06:40
08/24/05 14:06:56  08/25/05 00:06:43  [EMAIL PROTECTED]
       renew until 08/25/05 14:06:40
08/24/05 14:06:57  08/25/05 00:06:43  kadmin/[EMAIL PROTECTED]
       renew until 08/25/05 14:06:40

Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached


---

Any suggestions?

thanks,

Jeremy

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to