Comment 7 for bug 551901

Ok, I grabbed the krb5 1.8.1 sources and applied the patch you linked, built kerberos, and switched to from the 1.8.alpha1 libs (from ubuntu 10.04) to the patched 1.8.1 libs. I restarted and attempted to join the domain again using domainjoin-cli. This time I get no /var/log/syslog errors from GSS-API as I had up till now. Instead, both Likewise-Open and the Windows 2000 AD server agree that the machine has successfully joined the domain, but at the end of the process, domainjoin-cli threw the following error (from syslog):

Apr 12 15:48:13 matt-linux lsassd[1661]: 0x7f829bac7710:Failed to run provider specific request (request code = 8, provider = 'lsa-activedirectory-provider') -> error = 1225, symbol = ERROR_CONNECTION_REFUSED, client pid = 2169

I get the same error if I attempt to leave the domain, but leaving is unsuccessful. I think I'm going to clean the likewise-open install, remove the domain on the server end and try to join again from scratch.