hello, linuxcaffe alum needs help with samba windows ad authentication

[Timothy Hildred]

Hey everybody.

I am a long time employee of the linuxcaffe at harbord and grace where I
might have met some of you before. A mutual friend Jamon suggested i try
here for advice when configuring samba to authenticate with kerberos on
active directory. so here is my problem;
kinit Administrator gives me a ticket
net ads join -U Administrator gives me:
libsmb/smb_signing.c:(253)   signing_good: BAD SIG: seq 1 Failed to join
domain: Access denied #

however, when i do a kinit timadshare (which is a user i made in active
directory) i get a ticket and can join the realm.
Using short domain name -- RIGHT
Joined 'TIMADSHARE' to realm 'RIGHT.AD.SP.COM'

wbinfo -u and -g both do what they ought, but neither getent group or passwd
do.

i have been hacking at this for about a week now, and i think i might
explode. any suggestions?

sincerely
Tim Hildred
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gtalug.org/pipermail/legacy/attachments/20100528/c45022f4/attachment.html>