rme at bluemail.ch
2025-Oct-29 07:32 UTC
[Samba] KRB5 pam_winbind using KEYRING does not work
> So It works for myself on two different distros (and without> libpam-krb5). > So it looks like it is an Arch problem. OK, I will have to go through so me more testing. In regards to ARCH installation. I am actually also using EndeavourOS (EOS) on my side. It's very quick to install and providing quite "pure" ARCH Linux experience. Manjaro might be just as good. I don't want to waste more of your time. Thanks for tracking it down on other distros. I will do some more testing on ARCH and potential other platforms before coming back here. Thank you! Rainer
On Wed, 29 Oct 2025 08:32:44 +0100 Rainer Meier via samba <samba at lists.samba.org> wrote:> > > So It works for myself on two different distros (and without > > libpam-krb5). > > So it looks like it is an Arch problem. > > OK, I will have to go through so me more testing. > In regards to ARCH installation. I am actually also using EndeavourOS > (EOS) on my side. It's very quick to install and providing quite > "pure" ARCH Linux experience. Manjaro might be just as good. > > I don't want to waste more of your time. Thanks for tracking it down > on other distros. I will do some more testing on ARCH and potential > other platforms before coming back here. > > Thank you! > > Rainer >I now know what is happening, but not why. If I log into a Debian computer, I get a kerberos ticket, the 'KRB5CCNAME' is set in 'env' and klist shows the ticket. None of that occurs on EndeavourOS (yes I managed to install it), but if you run 'kinit' you get a ticket. I have no idea why it doesn't work like Debian (presumably RL10 works the same, but I haven't checked). Rowland