The Samba-Bugzilla – Bug 3773
new net ads fails
Last modified: 2006-06-22 14:55:05 UTC
Jerry, opening a bug as the sniffs are too large for the mailing list
Just tried the new ADS join code against Windows 2000. In my
domain creating a workstation with ACB_PWNOEXP fails with
NT_STATUS_INVALID_PARAMETER, see invalid.cap. Removing that
parameter I get a lot further but I still get an error
delphin:~ # net ads join -U administrator%geheim
Using short domain name -- W2000AD
Failed to set servicePrincipalNames.
Only NTLM authentication will be possible.
Joined 'DELPHIN' to realm 'W2KAD.W2K3AD.ORG'
Apparently I can't set dNSHostName in this domain. See
Created attachment 1899 [details]
Created attachment 1900 [details]
failing to set dNSHostName
Win2k gets the same failure when the server's fqdn is outside
of the Windows domain. WinXP gets around this by simply removning the
1.2.840.1135188.8.131.523 control from the modify. I'll reproduce
your test and code up a patch. Thanks for the testing.