Displaying 3 results from an estimated 3 matches for "smb_krb5_kt_open".
2017 Apr 05
4
Key table name malformed
Hai Mourik-Jan,
This looks all good.
Only one thing in the config, you can remove :
winbind nss info = rfc2307
Since your alread set ( for 4.6.x) :
idmap config INTECH:unix_nss_info = yes
Can you check the content of the keytab? klist -ke /etc/krb5.keytab
post ( if needed anonymized ) the content you see.
run : net ads keytab list -UAdministrator
And did you by accident run : net ads
2017 Apr 05
0
Key table name malformed
...ssing:~# net ads testjoin
> Join is OK
> root at processing:~#
However no keytab is generated during join, despite having in the domain
member smb.conf:
> dedicated keytab file = /etc/krb5.keytab
> kerberos method = secrets and keytab
And the reason why it's not generated:
> smb_krb5_kt_open failed (Key table name malformed)
> ads_keytab_add_entry failed while adding 'HOST/PROCESSING' principal.
> libnet_Join:
> libnet_JoinCtx: struct libnet_JoinCtx
> out: struct libnet_JoinCtx
> account_name : NULL
> netbios_dom...
2017 Apr 04
4
Key table name malformed
...main_func_level: 2
> ads_domain_func_level: 2
> kerberos_secrets_store_des_salt: Storing salt "host/processing.SAMBA.COMPANY.COM at SAMBA.COMPANY.COM"
> check lock order 1 for /var/lib/samba/private/secrets.tdb
> release lock order 1 for /var/lib/samba/private/secrets.tdb
> smb_krb5_kt_open failed (Key table name malformed)
> ads_keytab_add_entry failed while adding 'HOST/PROCESSING' principal.
> libnet_Join:
> libnet_JoinCtx: struct libnet_JoinCtx
> out: struct libnet_JoinCtx
> account_name : NULL
> netbios_dom...