nixCraft

Hi all,

Starting from samba version 3.0.23, I am no longer able to join ads domain. Maybe somebody have made it please help me. I am attaching the smb.conf and krb.conf. I am able to join domain with samba version 3.0.22 using these configurations but with version 3.0.23 it always fails. They have rewritten the "net ads join" portion and i'm lost.
"net rpc join" is successful, the problem is only on "net ads join".
Any help is greatly welcome.

# net ads join -U administrator%111111
ads_connect: Operation error

# rpm -qa|grep samba
samba-client-3.0.23c-2
samba-3.0.23c-2
system-config-samba-1.2.35-1.1
samba-common-3.0.23c-2

# rpm -qa|grep krb
pam_krb5-2.2.11-1
krb5-devel-1.5-7
krbafs-devel-1.2.2-10.1
krb5-libs-1.5-7
krb5-workstation-1.5-7
krb5-auth-dialog-0.7-1
krbafs-1.2.2-10.1

# cat /etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
ticket_lifetime = 24000
default_realm =VM2K-NATIVE.COM
dns_lookup_realm = false
dns_lookup_kdc = false

[realms]
VM2K-NATIVE.COM = {
kdc = 192.168.100.166:88
default_domain = VM2K-NATIVE.COM
}

[domain_realm]
.VM2K-NATIVE.COM = VM2K-NATIVE.COM
VM2K-NATIVE.COM = VM2K-NATIVE.COM

[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}

# cat /etc/samba/smb.conf
[global]
netbios name = NAS164
workgroup = VM2K-NATIVE
realm = VM2K-NATIVE.COM
client ntlmv2 auth = no
client schannel = auto
log level = 3
log file = /var/log/samba
max log size = 300
strict allocate = no
debug timestamp = no
socket options = IPTOS_LOWDELAY TCP_NODELAY
wins server =
os level = 8
security = ADS
encrypt passwords = YES
smb passwd file = /etc/sysconfig/sambad/smbpasswd
password server = *
idmap uid = 10000-30000
idmap gid = 10000-30000
winbind enum users = yes
winbind enum groups = yes
winbind cache time = 15
template shell = /bin/bash
template homedir = /mnt/NAS/home/%D/%U

warren

Yes it is badly broken and I am using old version. Try to run up2date to see if updated version is available or not. What is output of the following command?

__________________
Vivek | My personal blog
Linux Evangelist
Play hard stay cool