samba - Jul 2022 - Kerberos kinit not running

On Tue, 2022-07-19 at 22:09 +0200, Maurizio Caloro via samba
wrote:
> hello
> 
> after installing Samba 4.15.7 from Luis distro now i have the problem
> that me kinit Username not running any more. also arnt possible to
> join 
> to Domain.
> 
> i think this are running out from this following error.
> meny thanks for possible help
> 
> --
> 
> /etc/samba# kinit Administrator at Caloro.m
> kinit: Cannot find KDC for realm "Caloro.m" while getting initial
> credentials
> 
> /etc/samba# kinit Administrator at CALORO.M
> kinit: Client 'Administrator at CALORO.M' not found in Kerberos
> database 
> while getting initial credentials
This works for me.
> 
> 
> /etc/samba# cat /etc/krb5.conf
> [libdefaults]
>          default_realm = CALORO.M
>          dns_lookup_realm = false
>          dns_lookup_kdc = true
You only need the lines above.
> 
> 
> ? krb5-kdc.service - Kerberos 5 Key Distribution Center
>       Loaded: loaded (/lib/systemd/system/krb5-kdc.service; enabled; 
> vendor preset: enabled)
Turn this off and remove it, you are running two kdc's, the Heimdal one
built into Samba and the MIT kdc.

Rowland

Am 19.07.2022 um 22:32 schrieb Rowland Penny via samba:
> On Tue, 2022-07-19 at 22:09 +0200, Maurizio Caloro via samba wrote:
>> ? krb5-kdc.service - Kerberos 5 Key Distribution Center
>>        Loaded: loaded (/lib/systemd/system/krb5-kdc.service; enabled;
>> vendor preset: enabled)
> Turn this off and remove it, you are running two kdc's, the Heimdal one
> built into Samba and the MIT kdc.
>
> Rowland
thanks for quick help, krb5-kdc are gone
 ? -->rc? krb5-kdc??? 1.18.3-6+deb11u1??? amd64??? MIT Kerberos key 
server (KDC)

or i need to delete all this?

# dpkg -l | grep krb5*
ii? krb5-config??? 2.6+nmu1??? all??? Configuration files for Kerberos 
Version 5
rc? krb5-kdc??? 1.18.3-6+deb11u1??? amd64??? MIT Kerberos key server (KDC)
ii? krb5-locales??? 1.18.3-6+deb11u1??? all internationalization support 
for MIT Kerberos
ii? krb5-multidev:amd64??? 1.18.3-6+deb11u1??? amd64 development files 
for MIT Kerberos without Heimdal conflict
ii? krb5-user??? 1.18.3-6+deb11u1??? amd64??? basic programs to 
authenticate using MIT Kerberos
ii? libgssapi-krb5-2:amd64??? 1.18.3-6+deb11u1??? amd64??? MIT Kerberos 
runtime libraries - krb5 GSS-API Mechanism
ii? libkrb5-26-heimdal:amd64??? 7.7.0+dfsg-2??? amd64??? Heimdal 
Kerberos - libraries
ii? libkrb5-3:amd64??? 1.18.3-6+deb11u1??? amd64??? MIT Kerberos runtime 
libraries
ii? libkrb5-dev:amd64??? 1.18.3-6+deb11u1??? amd64??? headers and 
development libraries for MIT Kerberos
ii? libkrb5support0:amd64??? 1.18.3-6+deb11u1??? amd64??? MIT Kerberos 
runtime libraries - Support library

but styl the same

# kinit Administrator at CALORO.M
kinit: Client 'Administrator at CALORO.M' not found in Kerberos database
while getting initial credentials