while joining Samba client (fileserver) to a win2003 AD getting a message
 

Hi

I am trying to join a samba 3 server on Redhat LE5 to a windows 2003 AD. And I am getting this error


[root@rawana1 etc]# net ads join -S Phantom1 -U Administrator%****** -d1
Using short domain name -- IIL
Failed to set servicePrincipalNames. Please ensure that
the DNS domain of this server matches the AD domain,
Or rejoin with using Domain Admin credentials.
Disabled account for 'RAWANA1' in realm 'IIL.INFORMATICS.LK'
[root@rawana1 etc]#

And mu smb.conf, krb5.conf and hosts as follows

[root@rawana1 samba]# cat smb.conf
# Global parameters
[global]
workgroup = IIL
realm = IIL.INFORMATICS.LK
preferred master = no
server string = %S
security = ADS
encrypt passwords = yes
log level = 3
log file = /var/log/samba/%m
max log size = 50
idmap backend = ad
winbind separator = +
idmap uid = 10000-20000
idmap gid = 10000-20000

[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No

[root@rawana1 etc]# cat /etc/krb5.conf
[libdefaults]
default_realm = IIL.INFORMATICS.LK
dns_lookup_kdc = fales
dns_lookup_realm = fales

[realms]
IIL.INFORMATICS.LK = {
kdc = phantom1.iil.informatics.lk
}

[domain_realms]
.kerberos.server = IIL.INFORMATICS.LK


[root@rawana1 samba]# cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 rawana1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
192.168.11.21 Phantom1.iil.informatics.lk Phantom1


Can cone one tell me how to fix this issue

Thanks

Hi all

After I put these entries it worked

[domain_realm]
.iil.informatics.lk = IIL.INFORMATICS.LK
iil.informatics.lk = IIL.INFORMATICS.LK


Thanks