From owner-freebsd-questions@FreeBSD.ORG  Mon Aug  4 07:15:45 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@www.freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 106D737B401
	for <freebsd-questions@www.freebsd.org>;
	Mon,  4 Aug 2003 07:15:45 -0700 (PDT)
Received: from daemon.uop.edu (daemon.uop.edu [138.9.200.11])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9A8CB43F75
	for <freebsd-questions@www.freebsd.org>;
	Mon,  4 Aug 2003 07:15:44 -0700 (PDT)
	(envelope-from wfroning@uop.edu)
Received: from daemon (localhost [127.0.0.1])
	by daemon.uop.edu (8.12.9/8.12.9) with SMTP id h74EEOQB072250
	for <freebsd-questions@lists.freebsd.org>;
	Mon, 4 Aug 2003 07:15:39 -0700 (PDT)	(envelope-from wfroning@uop.edu)
Date: Fri, 1 Aug 2003 13:05:00 -0700
From: Will Froning <wfroning@uop.edu>
To: freebsd-questions@www.freebsd.org
Message-Id: <20030801130500.08cabad7.wfroning@uop.edu>
Organization: OIT, University of the Pacific
X-Mailer: Sylpheed version 0.9.4 (GTK+ 1.2.10; i386-portbld-freebsd4.8)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Subject: Samba 3.0b2 + ADS
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Aug 2003 14:15:45 -0000

Has anyone successfully joined a FreeBSD 4.8 box running Samba 3.0b3 to
a Native mode AD tree?

Just wondering since I'm having a killer time getting it to work.  I can
get the krb5 keys and 'net ads lookup' works like a champ.  But 'net ads
join -U Administrator' always fails with:

[2003/08/01 08:11:03, 1] libsmb/clikrb5.c:ads_krb5_mk_req(267)
  krb5_cc_get_principal failed (No such file or directory)
[2003/08/01 08:11:03, 1] libsmb/clikrb5.c:ads_krb5_mk_req(274)
  krb5_get_credentials failed for dc3$@STK.REALM (Unknown error:
-1765328369)
[2003/08/01 08:11:03, 1] utils/net_ads.c:ads_startup(176)
  ads_connect: Server is unavailable

I have dc3 and dc2 shortname entries in /etc/hosts.  Below is the
smb.conf file relevant entries (I've tried it with and without the
workgroup entry).

[global]
   workgroup = STK
   realm = stk.realm
   security = ads
   netbios name = MARMAR
   encrypt passwords = yes

I've been posting on samba@lists.samba.org, but no solution.  

Please CC me on the reply, thanks a bunch.

Thanks,
Will

-- 
Will Froning
Unix Sys. Admin.
wfroning@uop.edu