On Tue, May 09, 2006 at 03:54:13PM -0400, Gwen Parker
wrote:> I'm trying to configure a Solaris 8 system to authenticate Samba
against
> Windows 2003 ADS. I've compiled the appropriate packages; however,
I'm
> quickly stuck trying to get my kerberos ticket. Here's the error:
>
> sumac:/opt/local/kerberos5/bin# ./kinit admin@DCRI.DUKE.NET
> kinit(v5): Cannot resolve network address for KDC in requested realm while
>
> getting initial credentials
>
> Here's the lowdown:
> Samba client -- sumac.dcri.duke.edu 152.16.48.61
> ADS server - vmsodium.dcri.duke.net 10.0.101.65
>
> My /etc/resolv.conf
>
> sumac:/opt/local/kerberos5/bin# more /etc/resolv.conf
> domain dcri.duke.edu
> nameserver 152.16.48.78
> nameserver 152.16.49.44
> nameserver 152.16.49.47
>
> Although I rather not modify my /etc/resolv.conf, I've read that this
> error is due to DNS lookups. I am able to resolve using nslookup. I
> have tried 1) adding my ADS server's IP to /etc/resolv.conf and a
"search
> dcri.duke.net" line. I've also tried using the IP in the
krb5.conf file.
> I can't get past that error. Here is my /etc/krb5.conf..
>
> [libdefaults]
> default_realm = dcri.duke.net
>
>
> [realms]
> dcri.duke.net = {
> # kdc = vmsodium.dcri.duke.net
> kdc = 10.0.101.65
> }
>
> [domain_realms]
> .kerberos.server = dcri.duke.net
I think realm names are case sensititve. DCRI.DUKE.NET doesn't match
dcri.duke.net.
Jeremy.