Failed to join domain: failed to set machine kerberos encryption types: Insufficient access











up vote
3
down vote

favorite
1












Has anyone gotten this error when trying to join CentOS 7 to Active Directory? I tried various ways(via cli, gui, tui) and always get same error.



Failed to join domain: failed to set machine kerberos encryption types: Insufficient access









share|improve this question
























  • do you use an AD account with admin right ?
    – Archemar
    Dec 8 '15 at 14:39










  • Yes, I tried to join RHEL 6.4 with same method to AD and it succeeded.
    – Losmino
    Dec 8 '15 at 14:42






  • 1




    post here the command what you did in the cli, please
    – Rui F Ribeiro
    Dec 8 '15 at 15:26












  • access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/… Do by this guide, and every tuturial is very similar to this. Also tried with realm join command with adjusting all required parameters.
    – Losmino
    Dec 8 '15 at 15:43












  • Any one with some help?
    – Losmino
    Dec 25 '15 at 12:49















up vote
3
down vote

favorite
1












Has anyone gotten this error when trying to join CentOS 7 to Active Directory? I tried various ways(via cli, gui, tui) and always get same error.



Failed to join domain: failed to set machine kerberos encryption types: Insufficient access









share|improve this question
























  • do you use an AD account with admin right ?
    – Archemar
    Dec 8 '15 at 14:39










  • Yes, I tried to join RHEL 6.4 with same method to AD and it succeeded.
    – Losmino
    Dec 8 '15 at 14:42






  • 1




    post here the command what you did in the cli, please
    – Rui F Ribeiro
    Dec 8 '15 at 15:26












  • access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/… Do by this guide, and every tuturial is very similar to this. Also tried with realm join command with adjusting all required parameters.
    – Losmino
    Dec 8 '15 at 15:43












  • Any one with some help?
    – Losmino
    Dec 25 '15 at 12:49













up vote
3
down vote

favorite
1









up vote
3
down vote

favorite
1






1





Has anyone gotten this error when trying to join CentOS 7 to Active Directory? I tried various ways(via cli, gui, tui) and always get same error.



Failed to join domain: failed to set machine kerberos encryption types: Insufficient access









share|improve this question















Has anyone gotten this error when trying to join CentOS 7 to Active Directory? I tried various ways(via cli, gui, tui) and always get same error.



Failed to join domain: failed to set machine kerberos encryption types: Insufficient access






centos active-directory kerberos domain






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Jul 26 '16 at 23:34









clk

1,5641821




1,5641821










asked Dec 8 '15 at 14:28









Losmino

162




162












  • do you use an AD account with admin right ?
    – Archemar
    Dec 8 '15 at 14:39










  • Yes, I tried to join RHEL 6.4 with same method to AD and it succeeded.
    – Losmino
    Dec 8 '15 at 14:42






  • 1




    post here the command what you did in the cli, please
    – Rui F Ribeiro
    Dec 8 '15 at 15:26












  • access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/… Do by this guide, and every tuturial is very similar to this. Also tried with realm join command with adjusting all required parameters.
    – Losmino
    Dec 8 '15 at 15:43












  • Any one with some help?
    – Losmino
    Dec 25 '15 at 12:49


















  • do you use an AD account with admin right ?
    – Archemar
    Dec 8 '15 at 14:39










  • Yes, I tried to join RHEL 6.4 with same method to AD and it succeeded.
    – Losmino
    Dec 8 '15 at 14:42






  • 1




    post here the command what you did in the cli, please
    – Rui F Ribeiro
    Dec 8 '15 at 15:26












  • access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/… Do by this guide, and every tuturial is very similar to this. Also tried with realm join command with adjusting all required parameters.
    – Losmino
    Dec 8 '15 at 15:43












  • Any one with some help?
    – Losmino
    Dec 25 '15 at 12:49
















do you use an AD account with admin right ?
– Archemar
Dec 8 '15 at 14:39




do you use an AD account with admin right ?
– Archemar
Dec 8 '15 at 14:39












Yes, I tried to join RHEL 6.4 with same method to AD and it succeeded.
– Losmino
Dec 8 '15 at 14:42




Yes, I tried to join RHEL 6.4 with same method to AD and it succeeded.
– Losmino
Dec 8 '15 at 14:42




1




1




post here the command what you did in the cli, please
– Rui F Ribeiro
Dec 8 '15 at 15:26






post here the command what you did in the cli, please
– Rui F Ribeiro
Dec 8 '15 at 15:26














access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/… Do by this guide, and every tuturial is very similar to this. Also tried with realm join command with adjusting all required parameters.
– Losmino
Dec 8 '15 at 15:43






access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/… Do by this guide, and every tuturial is very similar to this. Also tried with realm join command with adjusting all required parameters.
– Losmino
Dec 8 '15 at 15:43














Any one with some help?
– Losmino
Dec 25 '15 at 12:49




Any one with some help?
– Losmino
Dec 25 '15 at 12:49










2 Answers
2






active

oldest

votes

















up vote
0
down vote













I was able to successfully run:



net ads testjoin 


Even after receiving the same message on CentOS 7. I can login via my company AD successfully.






share|improve this answer























  • I get output when I run net ads testjoin: Join is OK
    – Losmino
    Feb 1 '16 at 16:29


















up vote
0
down vote













The solution were just in front of me. Although error appears the machine is joined to AD, error is misleading .
Useful command for checking if machine is in AD



net ads -P status


To provide machine stay in AD you need to create a kerberos ticket with



kinit


command.



Regards






share|improve this answer





















    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "106"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    convertImagesToLinks: false,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














     

    draft saved


    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f248115%2ffailed-to-join-domain-failed-to-set-machine-kerberos-encryption-types-insuffic%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    2 Answers
    2






    active

    oldest

    votes








    2 Answers
    2






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes








    up vote
    0
    down vote













    I was able to successfully run:



    net ads testjoin 


    Even after receiving the same message on CentOS 7. I can login via my company AD successfully.






    share|improve this answer























    • I get output when I run net ads testjoin: Join is OK
      – Losmino
      Feb 1 '16 at 16:29















    up vote
    0
    down vote













    I was able to successfully run:



    net ads testjoin 


    Even after receiving the same message on CentOS 7. I can login via my company AD successfully.






    share|improve this answer























    • I get output when I run net ads testjoin: Join is OK
      – Losmino
      Feb 1 '16 at 16:29













    up vote
    0
    down vote










    up vote
    0
    down vote









    I was able to successfully run:



    net ads testjoin 


    Even after receiving the same message on CentOS 7. I can login via my company AD successfully.






    share|improve this answer














    I was able to successfully run:



    net ads testjoin 


    Even after receiving the same message on CentOS 7. I can login via my company AD successfully.







    share|improve this answer














    share|improve this answer



    share|improve this answer








    edited Jan 12 '16 at 16:57









    sam

    13.1k31326




    13.1k31326










    answered Jan 12 '16 at 16:25









    Jess

    1




    1












    • I get output when I run net ads testjoin: Join is OK
      – Losmino
      Feb 1 '16 at 16:29


















    • I get output when I run net ads testjoin: Join is OK
      – Losmino
      Feb 1 '16 at 16:29
















    I get output when I run net ads testjoin: Join is OK
    – Losmino
    Feb 1 '16 at 16:29




    I get output when I run net ads testjoin: Join is OK
    – Losmino
    Feb 1 '16 at 16:29












    up vote
    0
    down vote













    The solution were just in front of me. Although error appears the machine is joined to AD, error is misleading .
    Useful command for checking if machine is in AD



    net ads -P status


    To provide machine stay in AD you need to create a kerberos ticket with



    kinit


    command.



    Regards






    share|improve this answer

























      up vote
      0
      down vote













      The solution were just in front of me. Although error appears the machine is joined to AD, error is misleading .
      Useful command for checking if machine is in AD



      net ads -P status


      To provide machine stay in AD you need to create a kerberos ticket with



      kinit


      command.



      Regards






      share|improve this answer























        up vote
        0
        down vote










        up vote
        0
        down vote









        The solution were just in front of me. Although error appears the machine is joined to AD, error is misleading .
        Useful command for checking if machine is in AD



        net ads -P status


        To provide machine stay in AD you need to create a kerberos ticket with



        kinit


        command.



        Regards






        share|improve this answer












        The solution were just in front of me. Although error appears the machine is joined to AD, error is misleading .
        Useful command for checking if machine is in AD



        net ads -P status


        To provide machine stay in AD you need to create a kerberos ticket with



        kinit


        command.



        Regards







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Feb 5 '16 at 8:39









        Losmino

        162




        162






























             

            draft saved


            draft discarded



















































             


            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f248115%2ffailed-to-join-domain-failed-to-set-machine-kerberos-encryption-types-insuffic%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            List directoties down one level, excluding some named directories and files

            list processes belonging to a network namespace

            list systemd RuntimeDirectory mounts