search for: ads_keytab_add_entri

Hello, I'm trying to authenticate all our linux machines to our ADS domain. As of now, I'm still in the process of setting up all the individual components before pushing the setup out. I've made quite a bit of progress, but I've hit a hitch when trying to add the machine's service principals (the 'host' primary specifically) to its keytab. I've searched, but I

I have samba+ads working fine *HOWEVER* when I run net ads keytab create it fails. Using -d 10 the debug output says it cannot write to the file. This is truly bizarre as I am running this as root! e.g. # /usr/local/opt/samba/samba-3.0.24/bin/net ads keytab create ; echo $? 183 And /usr/local/opt/samba/samba-3.0.24/bin/net -d 10 ads keytab create ; echo $? Gives [..snip..] ads_get_kvno:

First thing - I'd like to say a big "THANK YOU" to the developers. I just upgraded to samba-3.0.23 and I've noticed an alarming issue with respect to my configuration. I've been using the built-in keytab management and it looks like the updated code no longer creates the userPrincipal in Active Directory. Whether this is an issue for others or not, it would be nice to have

The net ads joins the host to the AD, but cant get the proper kerberos tix. Manually generating the kerberos keytab from AD dont work. Any suggestions? root@host /#head -1 /etc/release Solaris 10 10/08 s10s_u6wos_07b SPARC root@host /usr/sfw/sbin#./smbd -V Version 3.0.28 root@host /#for PKG in `pkginfo -x | grep -i samba | awk '{print $1}'`; do VER=`pkginfo -l ${PKG} | grep PSTAMP`;

Hello. I recompiled from the samba.org 3.0.7 SRPMs and it worked like a charm. I think the problem may have been that I was using RHEL3's 3.0.6 samba RPMs which depended on their own krb5-libs, and I used kerberos rpms that don't use e2fsprogs's libcom_err. Anyone privilaged enough to be using RHEL3 to integrate their linux machines into ADS may want to rebuild anything depending on

When "use kerberos keytab = yes" in smb.conf is set with samba-3.2.8 and the environment variable KRB5_KTNAME is not set with the value using prefix "FILE:" or the default_keytab in /etc/krb5.conf is set without the prefix i.e. default_keytab_name = /etc/v5srvtab then the function smb_krb5_open_keytab() returns KRB5_KT_UNKNOWN_TYPE. If smb_krb5_open_keytab with a

Hi Jeremy, Jerry and samba experts, This is Suresh from EMC . I am having difficulty in creating and adding a Kerberos principal using samba's net utility. This server is configured as a Winbind client to a Windows 2003 Active Directory. I've successfully bound it to AD and I am able to authenticate. If I log into this host I am properly issued a Kerberos ticket from AD so it would

Hi All, I am getting Kerberos "enc type" problem that I can't explain: [2005/06/11 11:41:29, 1, pid=29355] libads/kerberos_verify.c:ads_keytab_verify_ticket(61) ads_keytab_verify_ticket: krb5_kt_start_seq_get failed (No such file or directory) [2005/06/11 11:41:29, 3, pid=29355] libads/kerberos_verify.c:ads_secrets_verify_ticket(193) ads_secrets_verify_ticket: enc type [16]

Hai Mourik-Jan, This looks all good. Only one thing in the config, you can remove : winbind nss info = rfc2307 Since your alread set ( for 4.6.x) : idmap config INTECH:unix_nss_info = yes Can you check the content of the keytab? klist -ke /etc/krb5.keytab post ( if needed anonymized ) the content you see. run : net ads keytab list -UAdministrator And did you by accident run : net ads

Hoi Louis, The thing is that the keytab is not generated! That is the issue at hand. The join appears to have succeeded: > root at processing:~# net ads testjoin > Join is OK > root at processing:~# However no keytab is generated during join, despite having in the domain member smb.conf: > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab And the

I am trying to join a samba server and have the keytab file set. After joining there was no keytab file so I ran the command: /usr/sfw/sbin/net ads keytab add host -d 10 This was the result: [2007/12/04 21:40:09, 5] lib/debug.c:(391) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0

Hi, We are having an issue, trying to install a domain member server. I'm following the samba wiki: - samba 4.6.1 - krb5.conf as recommended on wiki - time synced - kinit works - dns works (DCs in resolv.conf) - setup a basic smb.conf (pasted at the end of this email) - edit nsswitch.conf to include winbind for passwd/group and then finally "net ads join -U administrator -d5" fails