lucvdv
April 29th, 2009, 08:08 AM
I'm trying to join a Ubuntu machine to an Active Directory domain where all accounts with administrator rights have unicode characters in their passwords (non-keyboard characters entered through Alt+(number) in windows or Shift-Ctrl-U(hex number) in Linux, hex number is 4 hex digits so it's really unicode and not an 8-bit ASCII code).
likewise-open is installed and nsswitch.conf was modified to make name resolution in the local domain work, as described in other threads.
I can access network shares using those domain accounts and passwords, although logging on to them seems to be slow.
But when I try to add the machine to the domain, it won't work. The error message seems to mean that the password is where it fails.
(Replaced the domain name by 'mydomain.local' and the account name by 'Administator' here, real names used are different.)
lucvdv@ubuntu:~$ sudo domainjoin-cli join mydomain.local Administrator
Joining to AD Domain: mydomain.local
With Computer DNS Name: ubuntu.mydomain.local
Administrator@MYDOMAIN.LOCAL's password:
[2009/04/28 07:35:00, 0] libads/kerberos.c:ads_kinit_password(356)
kerberos_kinit_password Administrator@MYDOMAIN.LOCAL failed: Preauthentication failed
Error: Unable to join domain [code 0x0008000e]
Domain join operation failed to create the computer account in Active Directory.
Common causes are a bad administrator password, a bad OU name, or an existing
computer account without modification permissions.
Any ideas?
likewise-open is installed and nsswitch.conf was modified to make name resolution in the local domain work, as described in other threads.
I can access network shares using those domain accounts and passwords, although logging on to them seems to be slow.
But when I try to add the machine to the domain, it won't work. The error message seems to mean that the password is where it fails.
(Replaced the domain name by 'mydomain.local' and the account name by 'Administator' here, real names used are different.)
lucvdv@ubuntu:~$ sudo domainjoin-cli join mydomain.local Administrator
Joining to AD Domain: mydomain.local
With Computer DNS Name: ubuntu.mydomain.local
Administrator@MYDOMAIN.LOCAL's password:
[2009/04/28 07:35:00, 0] libads/kerberos.c:ads_kinit_password(356)
kerberos_kinit_password Administrator@MYDOMAIN.LOCAL failed: Preauthentication failed
Error: Unable to join domain [code 0x0008000e]
Domain join operation failed to create the computer account in Active Directory.
Common causes are a bad administrator password, a bad OU name, or an existing
computer account without modification permissions.
Any ideas?