when i try to join our ESXi 5.0 host to AD domain, it fails with the following error. "Errors in Active Directory operations" I have found out the issue is with cat /etc/krb5.conf and cat /etc/pam.d/system-auth-generic files.
I have modified the files to look like the following.
# cat /etc/krb5.conf
[libdefaults]
default_tgs_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC
default_tkt_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC
preferred_enctypes = RC4-HMAC DES-CRC-MD5 DES-CBC-CRC
~ # cat /etc/pam.d/system-auth-generic
#%PAM-1.0
account sufficient /lib/security/$ISA/pam_lsass.so
account sufficient /lib/security/$ISA/pam_unix.so
account required /lib/security/$ISA/pam_deny.so
auth sufficient /lib/security/$ISA/pam_lsass.so
auth sufficient /lib/security/$ISA/pam_unix.so try_first_pass likeauth nullok
auth required /lib/security/$ISA/pam_deny.so
session sufficient /lib/security/$ISA/pam_unix.so
session required /lib/security/$ISA/pam_deny.so
I have several ESXi hosts to modify and i would prefer to just restart services to reflect the change above instead of rebooting host. Can somebody tell me what services to restart to make this change effective??