The Samba-Bugzilla – Bug 4789
net ads join fails with 3.0.25b - works with 3.0.20b
Last modified: 2013-02-18 13:30:47 UTC
Joining a client to an AD domain fails with Samba 3.0.25b on Solaris 10 (Sparc). The command I have used is:
# net ads join -S svvdc2.vegvesen.no -U adminvdt@VEGVESEN.NO
The output from 'net ads join' is (I have replaced the actual account name I used with <admin account>):
[2007/07/16 12:22:44, 0] libads/kerberos.c:ads_kinit_password(228)
kerberos_kinit_password <admin account>@VEGVESEN.NO failed: Preauthentication failed
Failed to join domain: Logon failure
I am sure the password is correct, and I have no problem geting a ticket with kinit, using the same account and password.
I can use the exact same config on samba 3.0.20b (compiled with the same configure options) on the same box and successfully join the domain. After the client has been joined to the domain, I can copy the file secrets.tdb to the 3.0.25b installation, and it works.
Created attachment 2821 [details]
Debug output / config files / snoop output
If your password is longer than 8 characters, you're going to run into this issue:
That's a duplicate of another bug:
It took the better part of a day to find the cause. This bug is not present in 3.0.24, which is what I've been using on Solaris 10 for exactly this reason.
*** This bug has been marked as a duplicate of 4866 ***