On Wed, Mar 11, 2020 at 1:06 PM Andreas Vetter <vetter@physik.uni-wuerzburg.de> wrote:
Hi, I try to join a Tumbleweed to an AD, I get the following error:
tw:~ # net ads join -U username Enter username's password: secrets_domain_info_kerberos_keys: generation of a des-cbc-md5 key failed: Bad encryption type secrets_store_JoinCtx: secrets_domain_info_password_create(pw) failed for UNI- WUERZBURG - NT_STATUS_UNSUCCESSFUL libnet_join_joindomain_store_secrets: secrets_store_JoinCtx() failed NT_STATUS_UNSUCCESSFUL Failed to join domain: This machine is not currently joined to a domain.
The smb.conf works in Leap 15.1 and 15.2, so this must be something new. Google only showed me a fedora bug. It's about removes support dor DES from kerberos: https://bugzilla.redhat.com/show_bug.cgi?id=1757071
Beginning with the krb5-1.18 release, single-DES encryption types are no longer supported. https://web.mit.edu/kerberos/krb5-1.18/
How to proceed? --
Mit freundlichen Gruessen, Andreas Vetter
-- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
-- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org