samba36 on 10-RELEASE can't join AD

[William Marcelo Piovezan]

Hi, 

 

I'm getting exactly the same problem as described in this message.

I was using FreeBSD 9.2 with samba36 working in a Windows environment, the
DC is Windows 2012.

I´ve just updated to FreeBSD 10  and could not join AD anymore. Kinit works
perfectly buy net ads join returns the following error:

 

Failed to join domain: failed to connect to AD: Looping detected inside
krb5_get_in_tkt

 

After several retries, the computer account at Windows DC has been locked
(maybe due to domain policy). I´ve deleted the account and tried to join
again but the same problem happened. But for some reason the computer
account is added to the Windows DC even with the Samba error. Trying wbinfo
-u returns nothing so I suspect the machine has not been added at all.

Is there anyone that could solve or workaround this problem? I have the
latest samba36.22 with heimdal installed.

 

> I can't seem to join AD with samba36 on 10-RELEASE:
> 
>  <http://lists.freebsd.org/mailman/listinfo/freebsd-ports> pacija at
server:/usr/local/etc % sudo net ads join -U pacija
> Enter pacija's password:
> kerberos_kinit_password
<http://lists.freebsd.org/mailman/listinfo/freebsd-ports> pacija at
EXAMPLE.ORG <javascript:;> failed: Looping
> detected
> inside krb5_get_in_tkt Failed to join domain: failed to connect to AD:
> Looping detected inside krb5_get_in_tkt
> 
> Kerberos seem to work OK, i can get tickets with kinit. Same krb5.conf
> and smb.conf on another 9.2-RELEASE machine are joining AD without
> problem.
> 
> Any suggestions?
> --
> Marko Cupać < <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>
marko.cupac at mimar.rs <javascript:;>>
> _______________________________________________
>  <http://lists.freebsd.org/mailman/listinfo/freebsd-ports> freebsd-ports
at freebsd.org <javascript:;> mailing list
>  <http://lists.freebsd.org/mailman/listinfo/freebsd-ports>
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to "
<http://lists.freebsd.org/mailman/listinfo/freebsd-ports>
freebsd-ports-unsubscribe at freebsd.org<javascript:;>
> "