[Pkg-samba-maint] Bug#566977: samba-common-bin: 'net ads join' fails against, Windows 2003 domain with 'Program lacks support for encryption type'

[Renzo Bagnati]

As I reported in launchpad for ubuntu 
(https://bugs.launchpad.net/ubuntu/+source/samba/+bug/512459), adding 
allow_weak_crypto = true to krb5.conf does not solve the problem for me:

# net ads join -U Administrator
Enter Administrator's password:
Using short domain name -- LAB
Joined 'VML-AMB' to realm 'mydomain.it'
[2010/01/26 17:06:10, 0] libads/kerberos.c:332(ads_kinit_password)
   kerberos_kinit_password VML-AMB$@MYDOMAIN.IT failed: 
Preauthentication failed

The machine was apparently joined to the domain, but I cannot login with 
my domain credentials, getting always an authentication failure.
"getent passwd" lists local users only.

The file log.wb-LAB contains these lines:

[2010/01/26 17:02:38, 1] libsmb/clikrb5.c:848(cli_krb5_get_ticket)
   cli_krb5_get_ticket: krb5_set_default_tgs_ktypes failed (Program 
lacks support for encryption type)
[2010/01/26 17:02:38, 1] libsmb/cliconnect.c:745(cli_session_setup_kerberos)
   cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Program 
lacks support for encryption type
[2010/01/26 17:02:39, 1] libsmb/clikrb5.c:848(cli_krb5_get_ticket)
   cli_krb5_get_ticket: krb5_set_default_tgs_ktypes failed (Program 
lacks support for encryption type)
[2010/01/26 17:02:39, 1] libsmb/clikrb5.c:848(cli_krb5_get_ticket)
   cli_krb5_get_ticket: krb5_set_default_tgs_ktypes failed (Program 
lacks support for encryption type)
[2010/01/26 17:02:39, 0] libads/sasl.c:819(ads_sasl_spnego_bind)
   kinit succeeded but ads_sasl_spnego_krb5_bind failed: Program lacks 
support for encryption type
[2010/01/26 17:02:39, 1] winbindd/winbindd_ads.c:127(ads_cached_connection)
   ads_connect for domain LAB failed: Program lacks support for 
encryption type

----------
Destina il tuo 5 per mille dell'IRPEF  (sul mod. 730 o mod. UNICO o mod. CUD) firmando e indicando il nostro codice fiscale 03254210150 nel riquadro "finanziamento agli enti della ricerca scientifica e dell'universita'" per aiutare a mantenere indipendente la ricerca scientifica dell'Istituto Mario Negri, una fondazione privata senza scopo di lucro che da oltre 40 anni opera nell'interesse degli ammalati.

Per maggiori informazioni:
Istituto Mario Negri, Via La Masa 19 - 20156 Milano
Tel: +39 02 390141 - Fax: +39 02 3546277  +39 02 39001918
Internet: www.marionegri.it, mnegri at marionegri.it