I am having a problem using kerberos I have installed samba4, and it appears to work correctly However I want to create a service principle and every time I try to use kadmin -p admin I get this error: Database error! Required KADM5 principal missing while initializing kadmin interface What am I doing wrong? Is there another command since Samba4 has it own kerberos? Please shed some light on my dilemma. Thank you Saad
On Wed, 2013-03-06 at 14:18 -0700, Saad Benateigha wrote:> I am having a problem using kerberos > > I have installed samba4, and it appears to work correctly > However I want to create a service principle > and every time I try to use > kadmin -p admin > I get this error: > Database error! Required KADM5 principal missing while initializing kadmin interface > > What am I doing wrong? > Is there another command since Samba4 has it own kerberos? > Please shed some light on my dilemma.Correct, you cannot use kamin against a Samba AD DC. We do not provide this interface. See samba-tool to managet your AD users. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org
https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO_TEMP#Samba_AD_management may be of help. Ricky On Fri, Mar 8, 2013 at 12:53 AM, Andrew Bartlett <abartlet at samba.org> wrote:> On Wed, 2013-03-06 at 14:18 -0700, Saad Benateigha wrote: > > I am having a problem using kerberos > > > > I have installed samba4, and it appears to work correctly > > However I want to create a service principle > > and every time I try to use > > kadmin -p admin > > I get this error: > > Database error! Required KADM5 principal missing while initializing > kadmin interface > > > > What am I doing wrong? > > Is there another command since Samba4 has it own kerberos? > > Please shed some light on my dilemma. > > Correct, you cannot use kamin against a Samba AD DC. We do not provide > this interface. > > See samba-tool to managet your AD users. > > Andrew Bartlett > > -- > Andrew Bartlett http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >--