Also filed as https://bugzilla.redhat.com/show_bug.cgi?id=1333392 'net -k ads join' stopped working after updating (from 4.3.6) to 4.3.8. # dnf downgrade samba\* libwbclient\* libsmbclient\* ctdb\* (to 4.3.0, although 4.3.6 also worked) # net -k ads join GER.CORP.INTEL.COMldb: unable to stat module /usr/lib64/samba/ldb : No such file or directory Kinit for DWOODHOU-DESK7$ to access cifs/HASGER402.ger.corp.intel.com@GER.CORP.INTEL.COM failed: Preauthentication failed Using short domain name -- GER Joined 'DWOODHOU-DESK7' to dns domain 'ger.corp.intel.com' kerberos_kinit_password DWOODHOU-DESK7$@GER.CORP.INTEL.COM failed: Preauthentication failed DNS update failed: kinit failed: Preauthentication failed [root@dwoodhou-desk7 ~]# echo $? 0 ... Noisy (and often prompts users to complain), but it worked. # dnf update (to 4.3.8) # net -k ads join GER.CORP.INTEL.COM ldb: unable to stat module /usr/lib64/samba/ldb : No such file or directory Kinit for DWOODHOU-DESK7$ to access cifs/HASGER402.ger.corp.intel.com@GER.CORP.INTEL.COM failed: Preauthentication failed Failed to join domain: failed to verify domain membership after joining: Logon failure I can provide -d10 output from both on request.
This appears to be fixed in 4.3.9 by commit 70d872740 ("s3:libsmb: use password = NULL for anonymous connections"). *** This bug has been marked as a duplicate of bug 11858 ***