I try to join AD domain but have error:
adcli join mydomain.dom -U admin -vvvv
* Using domain name: mydomain.dom.da
* Calculated computer account name from fqdn: PC-NO
* Calculated domain realm from name: MYDOMAIN.DOM.DA
* Discovering domain controllers: _ldap._tcp.mydomain.dom.da
* Sending NetLogon ping to domain controller: pdc.mydomain.dom.da
* Sending NetLogon ping to domain controller: sdc.mydomain.dom.da
* Received NetLogon info from: PDC.mydomain.dom.da
* Wrote out krb5.conf snippet to /tmp/adcli-krb5-7d9dCU/krb5.d/adcli-krb5-conf-ll4K3S
Password for admin@MYDOMAIN.DOM.DA:
* Authenticated as user: admin@MYDOMAIN.DOM.DA
* Looked up short domain name: MYDOMAIN
* Looked up domain SID: S-1-5-21-2129043xxx-1170727xxx-3678xxxx
* Using fully qualified name: pc-no
* Using domain name: mydomain.dom.da
* Using computer account name: PC-NO
* Using domain realm: mydomain.dom.da
* Calculated computer account name from fqdn: PC-NO
* Generated 120 character computer password
* Using keytab: FILE:/etc/krb5.keytab
* Found computer account for PC-NO$ at: CN=PC-NO,CN=Computers,DC=mydomain,DC=dom,DC=da
* Sending NetLogon ping to domain controller: pdc.mydomain.dom.da
* Received NetLogon info from: PDC.mydomain.dom.da
* Set computer password
* Retrieved kvno '12' for computer account in directory: CN=PC-NO,CN=Computers,DC=mydomain,DC=dom,DC=da
adcli: 'code == 0' not true at _adcli_krb5_keytab_test_salt
! Couldn't authenticate with keytab while discovering which salt to use: PC-NO$@MYDOMAIN.DOM.DA: Bad encryption type
! Couldn't add keytab entries: FILE:/etc/krb5.keytab: Bad encryption type
adcli: joining domain mydomain.dom.da failed: Couldn't add keytab entries: FILE:/etc/krb5.keytab: Bad encryption type
It was fixed in new version of this package for debian, centos redhat etc
Can you please update package?
Pinned Comments