HP CIFS Server 3.0a Administrator's Guide version A.02.01

Active Directory Service Member Server Support
Join an HP CIFS Server to a Windows 2000/2003 Domain as an ADS Member Server
Chapter 7 111
• You may see the warning message, KDC has no support for
encryption type. Change your administrator password to correct
this type of error.
• Other errors are likely to be errors in the /etc/krb5.conf file
(Remember you need to add :88 to the server field in
/etc/krb5.conf file.)
Step 4. Use the following procedures to configure the HP CIFS Server:
• For new installations, you can run /opt/samba/bin/samba_setup
and choose ADS Member Server.
For new installations, finish samba_setup commands and verify the
following smb.conf configuration items. samba_setup will then
perform the “net ads join -U Administrator%password”
command to join the ADS domain for you.
[global]
workgroup = MYREALM # Domain Name
realm = MYREALM.XYZ.COM
security = ADS
domain master = no
encrypt passwords = yes
netbios name = MYSERVER
password server = adsdc.myrealm.xyz.com
• For existing installations, modify smb.conf configuration items as
follows:
[global]
workgroup = MYREALM # Domain Name
realm = MYREALM.XYZ.COM
security = ADS
domain master = no
encrypt passwords = yes
netbios name = MYSERVER
password server = adsdc.myrealm.xyz.com
Then join the ADS domain by manually executing the "net ads
join -U Administrator%password” command.