On Mon, 2008-12-15 at 23:47 -0700, Joseph L. Casale wrote:
When you use kinit to acquire a Kerberos ticket prior to joining a Win2k3 domain with net ads join -U <upn> is that ticket merely used for the join that follows? When it expires does this mean anything?
You use kinit before joining the AD to test AD auth. That is, you want to be sure your "linux" side is configured properly to get a kerberos ticket in the first place. If you're able to get one, you should be to join the domain.
HTH,
Ranbir