HP CIFS Server and Kerberos
78
Windows 2003 domain Join:
Command : net ads join –U administrator%password
The administrator user that is supplied on the HP-UX command line is authenticated with DES-CBC-
CRC encryption. The ticket for hpatcwin2k4$ is RC4-HMAC.
The “net ads join” succeeds using CRC:
Command line output:
# net ads join -U administrator%samba
Using short domain name -- HPATC2003
Joined 'ATCUX5' to realm 'HPATC2003.HP.COM'
With debug level 10 on the “net ads join” there is no log entry that indicates a successful decrypt with
enctype 1 (CRC). The join succeeds, and the trace shows the correct CRC enctype on the ticket.
Investigation is under way to determine if this is simply a logging error in Samba.