Bug 215648 - net ads join or kerberos issue with fc6...
Summary: net ads join or kerberos issue with fc6...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: samba
Version: 6
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Simo Sorce
QA Contact: David Lawrence
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-11-15 00:54 UTC by Need Real Name
Modified: 2007-11-30 22:11 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2007-05-22 09:40:31 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Need Real Name 2006-11-15 00:54:47 UTC
Description of problem:
net ads join fails to use kerberos ticket, or kinit perhaps isn't doing
something correct.

Version-Release number of selected component (if applicable):
samba-3.0.23c-2
krb5-workstation-1.5-7

How reproducible:
Always

Steps to Reproduce:
1. kinit Administrator.DOMAIN
2. net ads join
3.
  
Actual results:
net ads join prompts for root password

Expected results:
linux server joins win2k3 domain.

Additional info:

Same setup on my fc4 box works as expected, samba.conf and krb5.conf files are
exactly the same on fc6 box.

kinit prompts for password, and accepts it. (No errors)

klist shows:

Ticket cache: FILE:/tmp/krb5cc_0
Default principal: Administrator.DOMAIN

Valid starting     Expires            Service principal
11/14/06 16:45:57  11/15/06 02:47:22 
krbtgt/INTRANET.PRIVATE.DOMAIN.DOMAIN
        renew until 11/15/06 16:45:57


Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

Comment 1 Rudi Chiarito 2006-11-24 18:51:32 UTC
Could this be fixed in 3.0.23d, which was just released last week and has a
bunch of AD fixes? I am currently bitten by Samba bug 4095 (and was able to
workaround it by building a patched 3.0.23c). I don't see the new version in
Rawhide or updates-testing yet, it might help with a number of reports.

Comment 2 Guenther Deschner 2007-03-15 14:27:54 UTC
Can you please verify with the latest update (3.0.24-1.fc6)?

Often the prompt during the net ads join is caused because "net" cannot find a
suitable DC. Could you, if the error still persists, upload the log level 10
stderr output (net ads join -d 10) ?

Comment 3 Guenther Deschner 2007-05-22 09:40:31 UTC
Assuming the join is working now, so closing this bug. If it doesn't work,
please reopen this bug with a a log level 10 "net ads join" logfile.

Thanks for the report.


Note You need to log in before you can comment on or make changes to this bug.