我正在尝试设置一台 Ubuntu 18.04 机器并将其加入 Active Directory 域。以前(例如在 Ubuntu 17.10 上)我可以这样做
# kinit -kt /path/to/keytab my_username # realm join ad.example.com
然而,在 Ubuntu 18.04 中,该命令似乎realm
看不到 Kerberos 票证:
# kinit -kt /path/to/keytab my_username # realm join --verbose ad.example.com * Resolving: _ldap._tcp.ad.example.com * Performing LDAP DSE lookup on: 10.A.B.150 * Performing LDAP DSE lookup on: 10.C.D.131 * Successfully discovered: ad.example.com Password for Administrator: * Unconditionally checking packages * Resolving required packages * LANG=C /usr/sbin/adcli join --verbose --domain ad.example.com --domain-realm AD.EXAMPLE.COM --domain-controller 10.A.B.150 --login-type user --login-user Administrator --stdin-password * Using domain name: ad.example.com * Calculated computer account name from fqdn: PCTEST * Using domain realm: ad.example.com * Sending netlogon pings to domain controller: cldap://10.A.B.150 * Received NetLogon info from: ADS2.ad.example.com * Wrote out krb5.conf snippet to /var/cache/realmd/adcli-krb5-liolnd/krb5.d/adcli-krb5-conf-032njz ! Couldn't authenticate as: [email protected]: Preauthentication failed adcli: couldn't connect to ad.example.com domain: Couldn't authenticate as: [email protected]: Preauthentication failed ! Failed to join the domain
这里可能发生了什么?我是否遗漏了某些明显的东西(例如,某些软件包未安装)?