Try to join an Red Hat ES 4 to a AD domain served by a W2k3 controler: # smbd -V Version 3.0.10-1.4E # cat /etc/redhat-release Red Hat Enterprise Linux ES release 4 (Nahant Update 1) (it was the same with ES release 4 without any update) # kinit <domain-adm> Password for <domain-adm>@<AD-domain>: # net ads join [2005/09/22 14:51:06, 0] libads/ldap.c:ads_add_machine_acct(1368) ads_add_machine_acct: Host account for <hostname> already exists - modifying old account Using short domain name -- <netbios domain name> [2005/09/22 14:51:10, 0] libads/kerberos.c:get_service_ticket(335) get_service_ticket: kerberos_kinit_password <hostname>$@>@<AD-domain>@>@<AD- domain> failed: Preauthentication failed Segmentation fault Red Hat uses MIT krb5, Suse 9.2 uses Heimdal Krb5 and samba 3.0.7 and there it works without error message (but not with kinit). I get the same error if I remove the machine from the AD and delete the *.tdb files on Linux (only the first message is of course different). If I google for this error message, I get many hits, but I can't find any bug report here, so I will create one now.
I'm pretty sure this has been fixed in a later release. You'll havbe to either build the latest version yourself or talk to RedHat about their packages. Sorry.