[Samba] net ads join -U syntax

2009-03-23 Thread Zottel

Hello,
I try to join a Samba 3.2 server on RHEL 4 to AD using

net ads join -d 2 -U myacco...@domain.com

It seems that the net utility does not 'like' a full qualified userid 
any longer. I was able to join using samba v3.09 and v3.025 but with 
3.2.8 I'm only able to join submitting a plain userid (without @domain 
appended), i.e.


net ads join -d 2 -U myaccount


When joining using the 'full qualified' userid myacco...@domain.com, I get

kerberos_kinit_password myacco...@domain.com@SUB1.DOMAIN.COM failed: 
Malformed representation of principal



in the logs. Quite obvious, that the net utility appends the realm entry 
 from smb.conf (SUB1.DOMAIN.COM in my case) to the userid, though it 
should not, as I already provided it.


Does anybody know if this behaviour has been changed on purpose from 3.0 
to 3.2? Any workarounds that exist?

I tested with Samba 3.3.1 as well, same behaviour.

Regards .. Thomas
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] net ads join -U syntax: use...@domain confuses kerberos

2009-03-10 Thread Thomas Nimphy
I try to join a Samba 3.2 server on RHEL 4 to AD using

net ads join -d 2 -U myacco...@maindom.com

The domain to join the samba server should join to is a subdomain of 
MAINDOM.COM, call it SUB1.MAINDOM.COM.

The interesting part of smb.conf is:

[global]
   workgroup = SUB1
   security = ADS
   realm = SUB1.MAINDOM.COM

When joining I get

kerberos_kinit_password myacco...@maindom.com@SUB1.MAINDOM.COM failed: 
Malformed representation of principal

However, the join is successful if a use a useraccount of the subdomain SUB1 
(omitting the @domain syntax!):

net ads join -d 2 -U mysub1account

Samba 3.2 net utility obviously does not know how to deal with @MAINDOM.COM 
added to the userid in -U parameter.

To join a samba server to a subdomain using a useraccount in the 'maindomain' 
worked fine in 3.0 versions of samba (3.0.9, 3.025)

Does anybody know if this behaviour has been changed on purpose from 3.0 to 
3.2? Any workarounds that exist?
I tested with Samba 3.3.1 as well, same behaviour.

Regards .. Thomas

___
Jetzt 1 Monat kostenlos! WEB.DE FreeDSL - Telefonanschluss + DSL
für nur 17,95 EURO/mtl.!* http://dsl.web.de/?ac=OM.AD.AD008K15039B7069a

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba