get_service_ticket: kerberos_kinit_password ULISES$ (at) SYSTEMMASTER.COM.AR (at) SYSTEMMASTER.COM.AR failed: Preauthentication failed

["Mariano Sokal" <marianosokal (at) siisa.com.ar>]

Mariano Sokal wrote:
>> get_service_ticket: kerberos_kinit_password
> ULISES$ (at) SYSTEMMASTER.COM.AR (at) SYSTEMMASTER.COM.AR failed: 
>> Preauthentication failed
> 
>> Do you have more than one DC?  I'm cleaning up this code some
>> right now actually.  The failure is coming when net is trying
>> to derive the salt used for DES keys.  It's kind of messy at the
>> moment.  My guess is that you access failures may be related
>> to something other than this message.
> 
> 
> Jerry:
> 
> Yes, we have 2 DC (darthsith and darthvader ;) )

>Could be a replication issue.  Sometimes the krb5 libs
>don't always communicate with the same DC as smbd.
>We're trying to fix this some in 3.0.23.

So there´s no way at this moment that I can make this computer join the ADS?
What if I turn one DC off and make the computer join... would that work when I turn the second DC back on? Did I say something stupid? :)

Regards,
Mariano

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba