Im trying to join a CentOS 5.1 box to our domain(W2k3) and get the following error when I join the domain:

net ads join -Uusername
username's password:
Using short domain name -- DOMAIN
DNS update failed!
Joined 'servername' to realm 'DOMAINNAME.COM'

*username as admin rights to join this box to the domain



DOMAIN is the shortname for DOMAINNAME

*replaced for security

id username
id: username: No such user



I can do a wbinfo -u and wbinfo -g and can see valid domain user and groups.

when I do a wbinfo -u | grep username
it returns with my username.




net ads info
LDAP server: Correct IP
LDAP server name: correct ldap server name
Realm: correct REALM
Bind Path: dc=correct domain,dc=COM
LDAP port: 389
Server time: Fri, 14 Nov 2008 10:09:49 EST
KDC server: correct KDC IP
Server time offset: 0


kinit username
Password for username@DOMAIN.COM:

returns back to prompt



I have a feeling its kereberos related but not sure where and how. Any suggestions?

thanks

Ok I recopied nsswitch.conf krb5.conf smb.conf system-auth to the correct locations on this server from a working server on the same domain. And restarted winbind/smb seems to be working now, had to set USE WINBIND in authconfig.




Next question. If I have 2 domains. How do I setup samba so I can access shares if the user is logged into their workstation from either domain?