Previously, when I did this:>> samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca >> ALL -U administratorThen I saw this:>> Password for [BROCKLEY\administrator]:Now I see this:>> samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca >> ALL -U administrator >> Cannot do GSSAPI to an IP address >> Password for [BROCKLEY\administrator]:Now, this is the same host that I was working on yesterday. The only thing I have done is to finally get the domain provisioned again. And yet, something I have done has changed the behaviour of this command. This testing is all taking place inside a FreeBSD jail. The /etc/hosts file contains this: 127.0.166.1 localhost localhost.brockley.harte-lyne.ca 192.168.8.166 smb4-1 smb4-1.brockley.harte-lyne.ca 192.168.8.167 smb4-2 smb4-2.brockley.harte-lyne.ca ping smb4-1 PING smb4-1 (192.168.8.166): 56 data bytes 64 bytes from 192.168.8.166: icmp_seq=0 ttl=64 time=0.065 ms 64 bytes from 192.168.8.166: icmp_seq=1 ttl=64 time=0.070 ms 64 bytes from 192.168.8.166: icmp_seq=2 ttl=64 time=0.075 ms ping localhost PING localhost (127.0.166.1): 56 data bytes 64 bytes from 127.0.166.1: icmp_seq=0 ttl=64 time=0.063 ms 64 bytes from 127.0.166.1: icmp_seq=1 ttl=64 time=0.083 ms Any ideas as to what I may have done to get 'Cannot do GSSAPI to an IP address'? -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail Do NOT open attachments nor follow links sent by e-Mail James B. Byrne mailto:ByrneJB at Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax: +1 905 561 0757 Canada L8E 3C3
Rowland penny
2020-Jun-05 21:13 UTC
[Samba] Cannot do GSSAPI to an IP address, was (no subject)
On 05/06/2020 21:32, James B. Byrne via samba wrote:>>> samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca >>> ALL -U administrator >>> Cannot do GSSAPI to an IP address >>> Password for [BROCKLEY\administrator]:It looks like an ipaddress is being used instead of a hostname, kerberos will not work with an ipaddress.> This testing is all taking place inside a FreeBSD jail.Never used a freebsd jail, all I know is that it is some form of a super chroot (and that could be wrong), so is everything available inside the jail ?> The /etc/hosts file > contains this: > > 127.0.166.1 localhost localhost.brockley.harte-lyne.ca > 192.168.8.166 smb4-1 smb4-1.brockley.harte-lyne.ca > 192.168.8.167 smb4-2 smb4-2.brockley.harte-lyne.caNow if that was a Linux /etc/hosts, I would say it was totally wrong, though it may be different on Freebsd, I would expect: 127.0.166.1??? ??? localhost 192.168.8.166?? smb4-1.brockley.harte-lyne.ca smb4-1 I would actually expect the '127.0.166.1' to be '127.0.0.1', but this is probably something to do with the jail.> Any ideas as to what I may have done to get 'Cannot do GSSAPI to an IP address'? >Not really, I do not know enough about Freebsd, is 'samba' actually running ? Rowland