Hide Forgot
Description of problem: When using "net ads join" to join to an AD domain it usually works nicely and SPN for HTTP and the related key in the keytab can be successfully generated, users can then access Kerberos authenticated pages served by the host with AD tickets. However, sometimes "net ads join" seems to partially fail to join to domain properly, a kerberos error is printed during join although the machine account has been created on AD. Then creating the SPN/HTTP doesn't work unless leaving the domain and rejoining. I'll attach full debug logs from a customer environment after a fully successful and problematic join attempts followed by "net ads status" output. Version-Release number of selected component (if applicable): samba-3.5.10-99.el6
This actually comes up only when one of the DCs in the domain is unreachable, if specifying a known-good server (net ads join -S ...) then join/leave always work reliably.
*** Bug 749142 has been marked as a duplicate of this bug. ***
This request was evaluated by Red Hat Product Management for inclusion in a Red Hat Enterprise Linux maintenance release. Product Management has requested further review of this request by Red Hat Engineering, for potential inclusion in a Red Hat Enterprise Linux Update release for currently deployed products. This request is not yet committed for inclusion in an Update release.
This request was not resolved in time for the current release. Red Hat invites you to ask your support representative to propose this request, if still desired, for consideration in the next release of Red Hat Enterprise Linux.
This request was erroneously removed from consideration in Red Hat Enterprise Linux 6.4, which is currently under development. This request will be evaluated for inclusion in Red Hat Enterprise Linux 6.4.
We can't reproduce it, but we are certain that it has been fixed in 3.6.6. See comment #30.
I've now tested samba-3.6.6-126.el6 and haven't seen any failures to join a domain so far so it certainly seems that this was caused by https://bugzilla.samba.org/show_bug.cgi?id=8897. Thanks!
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2013-0338.html