在 Ubuntu 18.04 中使用 kinit 加入 realmd 域

在 Ubuntu 18.04 中使用 kinit 加入 realmd 域

我正在尝试设置一台 Ubuntu 18.04 机器并将其加入 Active Directory 域。以前(例如在 Ubuntu 17.10 上)我可以这样做

# kinit -kt /path/to/keytab my_username
# realm join ad.example.com

然而,在 Ubuntu 18.04 中,该命令似乎realm看不到 Kerberos 票证:

# kinit -kt /path/to/keytab my_username
# realm join --verbose ad.example.com
 * Resolving: _ldap._tcp.ad.example.com
 * Performing LDAP DSE lookup on: 10.A.B.150
 * Performing LDAP DSE lookup on: 10.C.D.131
 * Successfully discovered: ad.example.com
Password for Administrator:
 * Unconditionally checking packages
 * Resolving required packages
 * LANG=C /usr/sbin/adcli join --verbose --domain ad.example.com --domain-realm AD.EXAMPLE.COM --domain-controller 10.A.B.150 --login-type user --login-user Administrator --stdin-password
 * Using domain name: ad.example.com
 * Calculated computer account name from fqdn: PCTEST
 * Using domain realm: ad.example.com
 * Sending netlogon pings to domain controller: cldap://10.A.B.150
 * Received NetLogon info from: ADS2.ad.example.com
 * Wrote out krb5.conf snippet to /var/cache/realmd/adcli-krb5-liolnd/krb5.d/adcli-krb5-conf-032njz
 ! Couldn't authenticate as: [email protected]: Preauthentication failed
adcli: couldn't connect to ad.example.com domain: Couldn't authenticate as: [email protected]: Preauthentication failed
 ! Failed to join the domain

这里可能发生了什么?我是否遗漏了某些明显的东西(例如,某些软件包未安装)?

相关内容