Mailinglist Archive: opensuse-factory (355 mails)

< Previous Next >
Re: [opensuse-factory] TW: net ads join - secrets_domain_info_kerberos_keys: generation of a des-cbc-md5 key failed: Bad encryption type
On Wed, Mar 11, 2020 at 1:06 PM Andreas Vetter
<vetter@xxxxxxxxxxxxxxxxxxxxxxx> wrote:

Hi,
I try to join a Tumbleweed to an AD, I get the following error:

tw:~ # net ads join -U username
Enter username's password:
secrets_domain_info_kerberos_keys: generation of a des-cbc-md5 key failed: Bad
encryption type
secrets_store_JoinCtx: secrets_domain_info_password_create(pw) failed for UNI-
WUERZBURG - NT_STATUS_UNSUCCESSFUL
libnet_join_joindomain_store_secrets: secrets_store_JoinCtx() failed
NT_STATUS_UNSUCCESSFUL
Failed to join domain: This machine is not currently joined to a domain.

The smb.conf works in Leap 15.1 and 15.2, so this must be something new.
Google only showed me a fedora bug. It's about removes support dor DES from
kerberos:
https://bugzilla.redhat.com/show_bug.cgi?id=1757071


Beginning with the krb5-1.18 release, single-DES encryption types are
no longer supported.
https://web.mit.edu/kerberos/krb5-1.18/

How to proceed?
--

Mit freundlichen Gruessen,
Andreas Vetter



--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups
References