Server not found in kerberos database (with net ads join)

[Joel Therrien]

Hi All,

     After running into a few issues in trying to join my debian
(squeeze) box to
a windows 2008 server, I am running into this (hopefully last) problem...

When I try to do te net join command, I get the following

> nanoelecfs:/home/joel# net join ads -S XX.XX.XX.XX dn
> 'DC=FS,DC=UML,DC=EDU' -U USERNAME
> Enter EEng_LDAP's password:
> [2010/02/10 15:20:10,  0] libads/sasl.c:819(ads_sasl_spnego_bind)
>   kinit succeeded but ads_sasl_spnego_krb5_bind failed: Server not
> found in Kerberos database
> Failed to join domain: failed to connect to AD: Server not found in
> Kerberos database
> ADS join did not work, falling back to RPC...
> Enter USERNAME's password:
> Could not connect to server XX.XX.XX.XX
> Connection failed: NT_STATUS_BAD_NETWORK_NAME

I have the following debain package installed for samba (2:3.4.5~dfsg-1)

on top of this, I have no idea why I need to specify the domain path
as well as the specific IP address of the server. But without those, I don't
even get this far... not specifying the server specifically results in a
"can't
find domain controller". And if it matters, yes, the DNS I use is actually
the same machine as the domain controller I am trying to connect to.

Well, any thoughts would be appreciated.

Joel Therrien

--
Asst. Prof. Joel M. Therrien
Ph: 978-934-3324
Fax: [phone]
[hidden email]
Dept. of Electrical&  Computer Engineering
U. Massachusetts-Lowell
1 University Ave
Lowell, MA 01854

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Dale Schroeder]

What version of libkrb5-3 do you have?  If it's 1.8x, see
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566977

Dale

On 02/10/2010 2:35 PM, Joel Therrien wrote:

> Hi All,
>
>     After running into a few issues in trying to join my debian
> (squeeze) box to
> a windows 2008 server, I am running into this (hopefully last) problem...
>
> When I try to do te net join command, I get the following
>
>> nanoelecfs:/home/joel# net join ads -S XX.XX.XX.XX dn
>> 'DC=FS,DC=UML,DC=EDU' -U USERNAME
>> Enter EEng_LDAP's password:
>> [2010/02/10 15:20:10,  0] libads/sasl.c:819(ads_sasl_spnego_bind)
>>   kinit succeeded but ads_sasl_spnego_krb5_bind failed: Server not
>> found in Kerberos database
>> Failed to join domain: failed to connect to AD: Server not found in
>> Kerberos database
>> ADS join did not work, falling back to RPC...
>> Enter USERNAME's password:
>> Could not connect to server XX.XX.XX.XX
>> Connection failed: NT_STATUS_BAD_NETWORK_NAME
>
> I have the following debain package installed for samba (2:3.4.5~dfsg-1)
>
> on top of this, I have no idea why I need to specify the domain path
> as well as the specific IP address of the server. But without those, I
> don't
> even get this far... not specifying the server specifically results in
> a "can't
> find domain controller". And if it matters, yes, the DNS I use is
> actually
> the same machine as the domain controller I am trying to connect to.
>
> Well, any thoughts would be appreciated.
>
> Joel Therrien
>

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Joel Therrien]

Darn! It is, and from what I saw there, this issue has not yet been
resolved...

Sounds like I am out of luck until this gets resolved.

Joel

On 2/10/2010 3:45 PM, Dale Schroeder wrote:

> What version of libkrb5-3 do you have?  If it's 1.8x, see
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566977
>
> Dale
>
> On 02/10/2010 2:35 PM, Joel Therrien wrote:
>> Hi All,
>>
>>     After running into a few issues in trying to join my debian
>> (squeeze) box to
>> a windows 2008 server, I am running into this (hopefully last)
>> problem...
>>
>> When I try to do te net join command, I get the following
>>
>>> nanoelecfs:/home/joel# net join ads -S XX.XX.XX.XX dn
>>> 'DC=FS,DC=UML,DC=EDU' -U USERNAME
>>> Enter EEng_LDAP's password:
>>> [2010/02/10 15:20:10,  0] libads/sasl.c:819(ads_sasl_spnego_bind)
>>>   kinit succeeded but ads_sasl_spnego_krb5_bind failed: Server not
>>> found in Kerberos database
>>> Failed to join domain: failed to connect to AD: Server not found in
>>> Kerberos database
>>> ADS join did not work, falling back to RPC...
>>> Enter USERNAME's password:
>>> Could not connect to server XX.XX.XX.XX
>>> Connection failed: NT_STATUS_BAD_NETWORK_NAME
>>
>> I have the following debain package installed for samba (2:3.4.5~dfsg-1)
>>
>> on top of this, I have no idea why I need to specify the domain path
>> as well as the specific IP address of the server. But without those,
>> I don't
>> even get this far... not specifying the server specifically results
>> in a "can't
>> find domain controller". And if it matters, yes, the DNS I use is
>> actually
>> the same machine as the domain controller I am trying to connect to.
>>
>> Well, any thoughts would be appreciated.
>>
>> Joel Therrien
>>

--
Asst. Prof. Joel M. Therrien
Ph: 978-934-3324
Fax: [phone]
[hidden email]
Dept. of Electrical&  Computer Engineering
U. Massachusetts-Lowell
1 University Ave
Lowell, MA 01854

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[sghaida]

Does the machine you are trying to add has a valid A/PTR records on the dns

if you are using windows dns after creating an entry in the dns
Principal will be auto created by windows kerberos


i think this is the problem

if the problem didnt solve could you attach kerberos and smb conf files

regards


for providing

On Wed, Feb 10, 2010 at 10:35 PM, Joel Therrien <[hidden email]> wrote:

> Hi All,
>
>    After running into a few issues in trying to join my debian (squeeze) box
> to
> a windows 2008 server, I am running into this (hopefully last) problem...
>
> When I try to do te net join command, I get the following
>
>> nanoelecfs:/home/joel# net join ads -S XX.XX.XX.XX dn
>> 'DC=FS,DC=UML,DC=EDU' -U USERNAME
>> Enter EEng_LDAP's password:
>> [2010/02/10 15:20:10,  0] libads/sasl.c:819(ads_sasl_spnego_bind)
>>  kinit succeeded but ads_sasl_spnego_krb5_bind failed: Server not found in
>> Kerberos database
>> Failed to join domain: failed to connect to AD: Server not found in
>> Kerberos database
>> ADS join did not work, falling back to RPC...
>> Enter USERNAME's password:
>> Could not connect to server XX.XX.XX.XX
>> Connection failed: NT_STATUS_BAD_NETWORK_NAME
>
> I have the following debain package installed for samba (2:3.4.5~dfsg-1)
>
> on top of this, I have no idea why I need to specify the domain path
> as well as the specific IP address of the server. But without those, I don't
> even get this far... not specifying the server specifically results in a
> "can't
> find domain controller". And if it matters, yes, the DNS I use is actually
> the same machine as the domain controller I am trying to connect to.
>
> Well, any thoughts would be appreciated.
>
> Joel Therrien
>
> --
> Asst. Prof. Joel M. Therrien
> Ph: 978-934-3324
> Fax: [phone]
> [hidden email]
> Dept. of Electrical&  Computer Engineering
> U. Massachusetts-Lowell
> 1 University Ave
> Lowell, MA 01854
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba