Through support case 04169907, the following error message is observed when system in joining in AD using "net ads join" command.

System info:

• RHEL9.6
• Kernel 5.14.0-570.19.1.el9_6.x86_64
• samba-4.21.3-3.el9

Command:

net ads join --no-dns-updates -U user dnshostname=hostname.example.com

Error observed:

ads_print_error: AD LDAP ERROR: 19 (Constraint violation): 0000200B: AtrErr: DSID-033E1079, #1:
        0: 0000200B: DSID-033E1079, problem 1005 (CONSTRAINT_ATT_TYPE), data 0, Att 90303 (servicePrincipalName)
Failed to join domain: Failed to set machine spn: Constraint violation
Do you have sufficient permissions to create machine accounts?

Observations:

When customer downgrades the samba package in their system, they can join into the domain again successfully. This test is shown in the support case.

we would like this fixed by z-stream errata as soon as possible rather than waiting for the next minor.

It would be necessary for Andreas schneider to be assigned to this bug.

The customer is willing to test samba version 4.21.4, which supposedly fixes the bug as I noticed in this bug report from samba:

https://bugzilla.samba.org/show_bug.cgi?id=15777