Hi!
I'm having the following issue: Linux Box with RedHat 3 joining a windows 2003 AD.

When doing net ads join the system reports

[2007/03/12 17:27:36, 5] libads/kerberos.c:get_service_ticket(367)
get_service_ticket: krb5_get_credentials for [EMAIL PROTECTED] enctype 16 failed: KDC has no support for encryption type [2007/03/12 17:27:36, 3] libads/kerberos.c:kerberos_derive_salting_principal_for_enctype(552) verify_service_password: get_service_ticket failed: KDC has no support for encryption type
[2007/03/12 17:27:36, 10] libads/kerberos.c:verify_service_password(465)
verify_service_password: decrypted message with enctype 1 salt HOST/[EMAIL PROTECTED]
[2007/03/12 17:27:36, 10] libads/kerberos.c:verify_service_password(465)
verify_service_password: decrypted message with enctype 3 salt HOST/[EMAIL PROTECTED]
[2007/03/12 17:27:36, 5] libads/kerberos.c:get_service_ticket(367)

but then it ends with

Joined 'SAENET01' to realm 'ABC.COM'
[2007/03/12 17:27:36, 2] utils/net.c:main(897)
 return code = 0

and in the windows 2003 the server appears as registered.

However, when launching samba, I get the following errors

[2007/03/12 17:32:49, 3] libsmb/clikrb5.c:ads_krb5_mk_req(381)
 ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)

and when trying to authenticate with a user


check_ntlm_password: Authentication for user [e0045146] -> [e0045146] FAILED with error NT_STATUS_TRUSTED_RELATIONSHIP_FAILURE
[2007/03/12 17:34:08, 3] smbd/error.c:error_packet(129)

krb5.conf and smb.conf are standard as taken from several post on internet which refers to Windows 2003 AD and Samba: I pretty sure there must be some details in the krb5.conf for
encryption that I'm missing, but still don't know what.

Any help will be much appreciate!

Arcetrax

_________________________________________________________________
Telefona con Messenger...Le chiamate ai PC sono Gratis! http://get.live.com/messenger/features

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to