Adding Linux box to Active Directory to use NTLM with Squid proxy

Hello,

I'm trying to add a kubuntu box to my AD but everytime I try to join it I get the same message, which is:

Using short domain name -- DOMAINNAME
Failed to set servicePrincipalNames. Please ensure that
the DNS domain of this server matches the AD domain,
Or rejoin with using Domain Admin credentials.
Disabled account for 'machinename' in realm 'MY.DOMAIN.COM'

I use some tutorials I found on the web to configure my smb.conf and my krb5.conf files. Here's how I set them up:

smb.conf

[global]
      log file = /var/log/samba/%m.log
      socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
      wins server = IP.ADDRESS
      domain master = False
      encrypt passwords = Yes
      realm = MY.DOMAIN.COM
      dns proxy = No
      netbios name = machinename
      server string = Proxy Server
      password server = dc
      local master = No
      workgroup = DOMAIN
      security = ads
      preferred master = False
      winbind separator = /
      winbind use default domain = yes
      max log size = 0
      idmap gid = 10000-20000
      idmap uid = 10000-20000

krb5.conf

[libdefaults]
      default_realm = MY.DOMAIN.COM

[realms]
      MY.DOMAIN.COM = {
            kdc = DC.MY.DOMAIN.COM:88
            admin_server = DC.MY.DOMAIN.COM:749
            default_domain = MY.DOMAIN.COM
      }

[domain_realm]
      .my.domain.com = MY.DOMAIN.COM
      my.domain.com = MY.DOMAIN.COM

I can get a ticket using the kinit command with a domain admin account and I see it when typing klist but I can't go further than that...

Any idea what I could check or do to make it work? As mentionned above, the goal of this is to use NTLM authentication with my Squid proxy.

Thanks in advance!
Start Free Trial