Voltar
-
Título
Error message during join "KRB5KRB_AP_ERR_REPEAT" -
Descrição
The following error message is shown in the join debug output:------------------------------ERROR: Unable to join computer objectERROR: Could not join to the domainVAS_ERR_KRB5: Kerberos errorCould not set passwordCaused by:KRB5KRB_AP_ERR_REPEAT (-1765328350): Request is a replay------------------------------
-
Causa
CAUSE 1:
Possible timeout communicating with the domain controllers.
CAUSE 2:
Blocked port preventing computer object password change during join.
-
Resolução
RESOLUTION 1:Try increasing the kdc_timeout value before running the join command again:
# /opt/quest/bin/vastool configure vas libdefaults kdc_timeout 15
If this value allows the join to complete then investigate both the network and Active Directory environment to determine why the delay is occurring.RESOLUTION 2:
Ensure that he following ports are open between the client and domain controllers:88 - TCP/ UDP (Kerberos traffic)389 - TCP (Kerberized LDAP - queries)389 - UDP (Kerberized LDAP - ping)464 - TCP (Kerberos - password changes)3268 - TCP (Global Catalog LDAP)