Try to join an Red Hat ES 4 to a AD domain served by a W2k3 controler:
# smbd -V
# cat /etc/redhat-release
Red Hat Enterprise Linux ES release 4 (Nahant Update 1)
(it was the same with ES release 4 without any update)
# kinit <domain-adm>
Password for <domain-adm>@<AD-domain>:
# net ads join
[2005/09/22 14:51:06, 0] libads/ldap.c:ads_add_machine_acct(1368)
ads_add_machine_acct: Host account for <hostname> already exists - modifying
Using short domain name -- <netbios domain name>
[2005/09/22 14:51:10, 0] libads/kerberos.c:get_service_ticket(335)
get_service_ticket: kerberos_kinit_password <hostname>$@>@<AD-domain>@>@<AD-
domain> failed: Preauthentication failed
Red Hat uses MIT krb5, Suse 9.2 uses Heimdal Krb5 and samba 3.0.7 and there it
works without error message (but not with kinit). I get the same error if I
remove the machine from the AD and delete the *.tdb files on Linux (only the
first message is of course different).
If I google for this error message, I get many hits, but I can't find any bug
report here, so I will create one now.
I'm pretty sure this has been fixed in a later release.
You'll havbe to either build the latest version yourself or
talk to RedHat about their packages. Sorry.