[Pkg-samba-maint] Bug#918432: samba: net ads join to armel arch Samba DC failed

[Tomasz Jelinski]

Package: samba
Version: 2:4.5.12+dfsg-2+deb9u4
Severity: normal

Dear Maintainer,

I can't connect workstation to samba DC configured on Orion platform
(armel arch) with installed  Debian Stretch (packages are fully updated to newest avaliable versions).  

net ads join -U administrator -d10  lead me to error: 
(..)
kerberos_kinit_password: as administrator at AD.ROWEROWANORKA.PL using
[MEMORY:libnet_join_user_creds] as ccache and config
[/var/run/samba/smb_krb5/krb5.conf.AD]
Starting GENSEC mechanism spnego
Starting GENSEC submechanism gse_krb5
gss_init_sec_context failed with [ Miscellaneous failure (see text):
Server (ldap/dc1.ad.rowerowanorka.pl at AD.ROWEROWANORKA.PL) unknown]
SPNEGO(gse_krb5) creating NEG_TOKEN_INIT failed:
NT_STATUS_INTERNAL_ERROR
Failed to setup SPNEGO negTokenInit request: NT_STATUS_INTERNAL_ERROR
(..) 

Wiresharked  Kerberos transmission gave me another level of debug: 
AS-REQ:  cname: KRB5-NT-PRINCIPAL: administrator, REAL:
AD.ROWEROWANORKA.PL sname: KRB5-NT-SRV_INST krbtgt, AD.ROWEROWANORKA.PL
AS-REP:  NT Status: Unknown error code 0x522e4441 

and next: 
TGS-REQ for  KRB5-NT-PRINCIPAL: ldap dc1.ad.rowerowanorka.pl 
KRB Error: KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN 


What I checked: 
- clean samba tdb,ldb files and smb.conf/krb5.conf according to
  samba.org manual for preparing to install DC.  Promote DC controller again. Problem with connect
  workstation to samba DC on armel arch persists. 
- I installed samba DC on amd64 architecture and successfully connect workstation
  to DC. 
 
-- System Information:
Debian Release: 9.6
  APT prefers stable
  APT policy: (550, 'stable'), (510, 'stable-updates'), (500, 'stable'), (10, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-8-amd64 (SMP w/4 CPU cores)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8), LANGUAGE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages samba depends on:
ii  adduser              3.115
ii  dpkg                 1.18.25
ii  init-system-helpers  1.48
ii  libbsd0              0.8.3-1
ii  libc6                2.24-11+deb9u1
ii  libldb1              2:1.1.27-1+b1
ii  libpam-modules       1.1.8-3.6
ii  libpam-runtime       1.1.8-3.6
ii  libpopt0             1.16-10+b2
ii  libpython2.7         2.7.13-2+deb9u3
ii  libtalloc2           2.1.8-1
ii  libtdb1              1.3.11-2
ii  libtevent0           0.9.31-1
ii  libwbclient0         2:4.5.12+dfsg-2+deb9u4
ii  lsb-base             9.20161125
ii  procps               2:3.3.12-3+deb9u1
ii  python               2.7.13-2
ii  python-dnspython     1.15.0-1
ii  python-samba         2:4.5.12+dfsg-2+deb9u4
ii  python2.7            2.7.13-2+deb9u3
ii  samba-common         2:4.5.12+dfsg-2+deb9u4
ii  samba-common-bin     2:4.5.12+dfsg-2+deb9u4
ii  samba-libs           2:4.5.12+dfsg-2+deb9u4
ii  tdb-tools            1.3.11-2
ii  update-inetd         4.44

Versions of packages samba recommends:
ii  attr                1:2.4.47-2+b2
ii  logrotate           3.11.0-0.1
ii  samba-dsdb-modules  2:4.5.12+dfsg-2+deb9u4
ii  samba-vfs-modules   2:4.5.12+dfsg-2+deb9u4

Versions of packages samba suggests:
pn  bind9          <none>
pn  bind9utils     <none>
pn  ctdb           <none>
ii  ldb-tools      2:1.1.27-1+b1
ii  ntp            1:4.2.8p10+dfsg-3+deb9u2
pn  smbldap-tools  <none>
ii  ufw            0.35-4
ii  winbind        2:4.5.12+dfsg-2+deb9u4

-- no debconf information