Arnaud Lesauvage
2009-Mar-06 12:02 UTC
[Samba] krb5.conf in /var/lib/samba/smb_krb5 very different from original
Hi all ! I have some problems browsing a samba share from a Canon ImageRunner printer. It tries to write to a share located on a samba server, configured to authenticate users against a windows 2003 Active directory. Samba version 3.2.6 is running on opensuse 11.1. After a lot of search, I tought that maybe it did not support the encryption type requested by my Samba server, so I checked my kerberos configuration. To my surprise, I found a krb5.conf.MYDOMAIN file in /var/lib/samba/smb_krb5, and this file is quite different from my /etc/krb5.conf file. For instance, the 'enc_types...' lines do not match. In /var/lib/samba/smb_krb5/krb5.conf.MYDOMAIN I have [libdefaults] default_realm = MYDOMAIN.LOCAL default_tgs_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5 default_tkt_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5 preferred_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5 And in /etc/krb5.conf [libdefaults] default_realm = MYDOMAIN.LOCAL clockskew = 300 default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc I created the /etc/krb5.conf manually following different tutorials about active directory integration, so I am puzzled to find this totally different configuration here. So my questions are quite obvious : Which one is used by samba for authentication ? Where do these configuration parameters come from ? And, last but not least, how do I change this configuration ? Thanks a lot for your help ! Regards -- Arnaud Lesauvage