Я пытаюсь настроить компьютер с Ubuntu 18.04 и присоединить его к домену Active Directory. На всех других системах, которые я использовал, я мог сделать
# kinit -kt /path/to/keytab my_username # realm join ad.example.com
Однако в Ubuntu 18.04 кажется, что команда realm не видит билет Kerberos:
# kinit -kt /path/to/keytab my_username # realm join --verbose ad.example.com * Resolving: _ldap._tcp.ad.example.com * Performing LDAP DSE lookup on: 10.A.B.150 * Performing LDAP DSE lookup on: 10.C.D.131 * Successfully discovered: ad.example.com Password for Administrator: * Unconditionally checking packages * Resolving required packages * LANG=C /usr/sbin/adcli join --verbose --domain ad.example.com --domain-realm AD.EXAMPLE.COM --domain-controller 10.A.B.150 --login-type user --login-user Administrator --stdin-password * Using domain name: ad.example.com * Calculated computer account name from fqdn: PCTEST * Using domain realm: ad.example.com * Sending netlogon pings to domain controller: cldap://10.A.B.150 * Received NetLogon info from: ADS2.ad.example.com * Wrote out krb5.conf snippet to /var/cache/realmd/adcli-krb5-liolnd/krb5.d/adcli-krb5-conf-032njz ! Couldn't authenticate as: Administrator@AD.EXAMPLE.COM: Preauthentication failed adcli: couldn't connect to ad.example.com domain: Couldn't authenticate as: Administrator@AD.EXAMPLE.COM: Preauthentication failed ! Failed to join the domain
Что здесь может происходить?