similar to: Samba 3.0.0 Beta 3: "krb5_cc_get_principal failed" but "Join to realm" successful?

As I learned from former threads, "net ads join" should not only join the Samba server to ADS, but also create Kerberos 5 credentials on the Linux box running Samba 3.0. Well, thanks Jerry joining the Samba 3.0 to ADS works now, but I won't get any Kerberos 5 credentials. winbindd throws errors because of missing Kerberos credentials. Kerberos 5 support is copiled into my samba

Hi guys, everytime I try to join my Samba 3.0 Beta 3 server to my Windows 2003 ADS domain, net puts out following error: ***** SNIP ***** [2003/08/12 14:33:48, 1] libsmb/clikrb5.c:cli_krb5_get_ticket(343) krb5_set_default_tgs_ktypes failed (Program lacks support for encryption type)net: relocation error: net: undefined symbol: krb5_cc_initialize ***** SNAP ***** This is the full level 10

Hiya, I'm using Fedora Test 2 and Samba 3.0.0-15 packages from Redhat/Fedora rawhide with a Windows 2003 Server. I'm also using MIT Kerberos 1.3.1. Everytime winbindd ist started, it writes following error into /var/log/samba/winbindd.log: [2003/10/13 10:13:40, 1] nsswitch/winbindd.c:main(832) winbindd version 3.0.0-15 started. Copyright The Samba Team 2000-2003 [2003/10/13

Hiya, I compiled the RPMs of Samba 3.0.0 RC1 according to "../samba-3.0.0rc1/packaging/RedHat/samba.spec" and installed the binaries from the freshly compiled rpm on my up2date Redhat 9.0 Server. The command "net join -U Administrator%****** -d10" creates following error: ***** SNIP ***** [root@samba30srv RedHat]# net join -U Administrator%******** -d10 [2003/08/19

Hi i am using Samba 3.0.0-14.3E.i am not getting tickets from the ADS server which is running on Win2K.i am seeing the logs in /var/log/samba/winbind.log i got these messages [2005/03/11 10:36:36, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269) krb5_cc_get_principal failed (No credentials cache found) [2005/03/11 11:01:00, 1] libads/ads_ldap.c:ads_name_to_sid(64) name_to_sid: root not found

Have succesfully installed and configured samba on BSD up to the point of joining the active directory domain. The command <net ads join -Uadministrator> returned a message saying that i had "sucessfully joined the domain" and a quick review of my ADDC shows that my samba server has sucessfully joined and created an object in AD. The command <wbinfo -u> returns a list

Hi everyone, I'm using the production release of 3.0.0 and can not join a W2003 domain: [printsrv4] /spool/samba-3.0.0/bin $ ./net -d 10 ads join -Uhumpty_dumpty [2003/10/29 15:35:39, 3] libads/sasl.c:ads_sasl_spnego_bind(191) got principal=adc1$@WIN.DESY.DE [2003/10/29 15:35:39, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269) krb5_cc_get_principal failed (No credentials cache found)

Hi all. Pretty new in Linux side of the world. I'm trying to run Samba 3.x on Fedora-core-1 in an ADS environment, with krb5 authentication. Installed Samba 3.0.2rc2 from source, installed the required libraries for kerberos MIT, configured smb.conf and krb5.conf. Run net ads join -U administrator and it worked, i can see the machine account in the active directory. From my linux box I

I'm trying to set up our test box here. Identical versions and setup to our devel box. It is part of the domain (has already been joined). And there was a problem with the secrets.tdb file (corrupted or whatever). winbindd.log: --- [2004/10/20 08:33:46, 1] nsswitch/winbindd_util.c:add_trusted_domain(166) Added domain XXXXXXXX XXXXXXXXX S-1-5-21-1645522239-1202660629-725345543

Hiya, I'm using Fedora Test 2 and Samba 3.0.0-15 packages from Redhat/Fedora rawhide with a Windows 2003 Server. wbinfo -u and wbinfo -g work without any errors, the entries to nsswitch.conf were made. I edited /etc/system-auth and added all necessary lines for pam_winbind as described in the samba documentation. Anyway, users that only exist within the Windows domain can't log on. Each

hi list, i am playing with samba 3.0 alpha 17 from cvs 20020701 and global groups running as pdc. i installed to /usr/local/samba30 (having the lock dir under /var/lock/samba30). i mapped some unix groups, but the dont appear as global group. on the w2k sp1 machine. i have also no domain admins right. the domain logon itself works fine. any ideas? btw: swat doesnt not work for me, it

I'm using RH9, and I have compiled samba 3.0.1 compiled from sources, > with the following options: > ./configure --with-winbind --with-winbind-auth-challenge --with-pam \ > --with-acl-support --with-ldapsam --with-pam_smbpass \ --with-ads > --with-ldap --with-dce-dfs --with-smbwrapper --enable-pam > net ads join -S server.domain.com -U support worked fine.

Hello everyone, I'm sorry for this long post, but I think there is a real understanding problem for many people on ADS domain membership. I'm not the first to post about this type of problem, however I didn't find an answer to it in the archives and I followed the HOWTO-collection. Well, this is what I'm doing : I am using samba-3.0.1 compiled from source, MIT kerberos 1.3.1

Hi, I have configured vsftpd on a RHEL 4 server box. Have configured Kerberos to work with the Windows 2003 Active Directory server and using the kinit & klist command verify that the Kerberos authentication is working. What I would like to do is : Only for vsftpd the authentication should be against the Active Directory, Below is the output of the /etc/pam.d/vsftpd --------------

Am still having problems getting Samba/W2K ADS to work w/MIT-KRB5. Fresh install of following: Slackware 10.1 Openldap 2.2.23 MIT krb5 1.4 Samba 3.0.11 (with clitar patch) Following "http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html#ads-member" I get to: kinit administrator@OURORG.OURDOMAIN.ORG (comes back to prompt after password, no error. klist -e gives:

Been working on this for the past 3 weeks and it STILL doesn't work. Machine 1: Samba 3 on Slackware 9 - member server Machine 2: Windows 2000 Advanced Server - PDC, AD Machine 1 has successfully joined the domain without incident - it shows up in AD-Users & Computers. kinit ADMINISTRATOR@MACHINE2 works on machine 1, accepts the correct password, and returns no errors. Machine 2 sees

Hi, I am trying to get samba/winbind setup to do active directory authentication. I am using samba 3.0.7, kerberos 1.3.5, and openldap 2.2.17. I can kinit and klist just fine. However, when I try to "net ads join -d10 -Uabostick", I get the error listed below: [2004/09/16 17:04:26, 3] libads/sasl.c:ads_sasl_spnego_bind(211) ads_sasl_spnego_bind: got server principal name

Hi, My XP client cant access the samba share: any help would be great!!!! My environment: RH ES 3.1 + "up2date" Samba 3.0.4-6.3E Kerberos 1.2.7 I have followed the "samba3 by example book" & the "Samba3 How To Guide" It joined to ad & I can View Kerberos tickets and do the Winbind stuff: -bash-2.05b# wbinfo -t checking the trust secret via RPC calls

Hi all, I successfully joined my Samba 3.0.6 box to our AD tree. wbinfo -t and -u work as expected. But when I try to access a share on the samba box (Windows AD controller), I am asked for a password, Samba then logs [2004/09/06 11:49:28, 1] smbd/sesssetup.c:reply_spnego_kerberos(173) Failed to verify incoming ticket! winbindd sometimes logs [2004/09/06 11:42:55, 1]

Hello List, I successfully joined a Suse 9.0 Server with Samba 3.0.6 to a W2K3 DC, following the guide from http://www.wlug.org.nz/ActiveDirectorySamba My setup seems to work okay, but whenever I start/restart winbind, I get the following message: [2004/09/24 10:26:54, 1] nsswitch/winbindd.c:main(854) winbindd version 3.0.6-SUSE started. Copyright The Samba Team 2000-2004 [2004/09/24