Hey Todd,
Kinit uses the installed kerberos package - if your kerberos package does not do TCP fallback in the AS_REQ, you'll never be able to get a ticket when you see this error message - it's generated by the KDC, which will refuse to issue a ticket > roughly 1500 bytes (for MS KDCs). Time to update your Kerberos port (MIT's dist > 1.4.1 supports TCP).
OK, I understand now. I installed MIT's Kerberos5 (installed port 'krb5' on FreeBSD, added 'KRB5_HOME=/usr/local' to /etc/make.conf and rebuilt samba3 port) and I succeeded joining the Samba server into ADS domain. Thanks to everyone! Bye, Nejc -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba