samba - Apr 2011 - samba+kerberos problem

Hi, I get some problem with samba when working on kerberos, would you
give me some advise? thanks

/etc/samba/smb.conf:
[global]
        workgroup = EXAMPLE
        #use kerberos keydtab = yes
        realm =LAB.BOS.REDHAT.COM
        security = ads
        #security = user
        server signing = auto
        kerberos method = system keytab
[public]
        path = /tmp/test
        read only = no
        writable = yes

> [root at hp-xw6600-01 ~]# kinit -k root
> [root at hp-xw6600-01 ~]# mount.cifs
//intel-sugarbay-dh-01.rhts.eng.rdu.redhat.com/public /mnt -o
sec=krb5,user=root,uid=root
> [root at hp-xw6600-01 ~]# ls /mnt
> ls: reading directory /mnt: Permission denied
> 
-- 
Jian Li                 IRC. lijian
Kernel-QE               Ext. 62608225
Red Hat Greater China   Tel. (86)150 1131 6861

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/10/2011 11:58 PM, Jian Li wrote:
> Hi, I get some problem with samba when working on kerberos, would you
> give me some advise? thanks
> 
> /etc/samba/smb.conf:
> [global]
>         workgroup = EXAMPLE
>         #use kerberos keydtab = yes
>         realm =LAB.BOS.REDHAT.COM
>         security = ads
>         #security = user
>         server signing = auto
>         kerberos method = system keytab
> [public]
>         path = /tmp/test
>         read only = no
>         writable = yes
> 
> 
>> [root at hp-xw6600-01 ~]# kinit -k root
>> [root at hp-xw6600-01 ~]# mount.cifs
//intel-sugarbay-dh-01.rhts.eng.rdu.redhat.com/public /mnt -o
sec=krb5,user=root,uid=root
>> [root at hp-xw6600-01 ~]# ls /mnt
>> ls: reading directory /mnt: Permission denied
>>
We should get some extra info about your environment:

What version of Samba/mount.cifs is hp-xw6600-01 using?  What is the
cifs server running, Win (version) or Lin and if Lin, what version of
Samba?  Finally, what is the KDC, Win (version) or Lin?

- -- 
________

Robert Freeman-Day

https://launchpad.net/~presgas
GPG Public Key:
http://keyserver.ubuntu.com:11371/pks/lookup?op=get&search=0xBA9DF9ED3E4C7D36
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk2i+pwACgkQup357T5MfTYzNACff3BFZw2418ckVT5ruFaZtqOx
vaIAn0RbUyLm5Sru17LQoDR2am+saNF9
=FmRE
-----END PGP SIGNATURE-----