OpenForum RSS: samba + win2003+ad

samba + win2003+ad (Alex)

Fri, 04 Dec 2009 11:04:03 GMT

��!
�� : �� 2 ��, �� , � �� - ��. ��
>>libsmb/clikrb5.c:ads_krb5_mk_req(602)

ads_krb5_mk_req: krb5_get_credentials failed for XXXhost@XXdomainname (KDC policy rejects request)
�� .

samba + win2003+ad (zmr0k)

Tue, 12 Aug 2008 11:47:20 GMT

Mark, �� , � �� : �� , �� winbind use default domain = yes, allow trusted domains = no � ��.

�� "ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or directory)" �� . �� . � ��:
1. �� "find_workgroup_on_subnet: workgroup search for $(my_short_name_domain) on subnet 10.130.129.33: found"
2. ads_try_connect: CLDAP request 10.243.223.10 failed
�� wbinfo -u/g �� (�� ) � �� winbindd.log, �� :
[2008/08/12 14:36:23, 1] nsswitch/winbindd_ads.c:query_user_list(209)
Not a user account? atype=0x30000000

$ uname -a
Linux test 2.6.18-1.2849.fc6 #1 SMP Fri Nov 10 12:36:14 EST 2006 i686 i686 i386 GNU/Linux
$ rpm -qa |grep -i -e ldap -e krb
krb5-devel-1.5-7
krb5-libs-1.5-7
pam_krb5-2.2.11-1
krb5-workstation-1.5-7
openldap-2.3.27-4
openldap-devel-2.

samba + win2003+ad (PJ)

Sun, 20 Jul 2008 08:22:32 GMT

Unable to find a suitable server - �� DNS �� Samba-��. �� WINS-�� (�� W2K3 native, �� :), �� Samba

wins server = IP.ADDR.OF.WINS

samba + win2003+ad (tux2002)

Fri, 18 Jul 2008 12:50:50 GMT

>��. �� smbd,nmbd � winbindd � ��ף� ��
>net ads join -U user%123 �ӣ �� . ��
>�� KDC, �� dc-01.podr.orgzap.ru
> - kinit user@PODR.ORGZAP.RU. �ӣ �� .
>�� wbinfo -u �� error looking

�� net ads join � �� syslog (� smb.conf log_level ��) - �� .

samba + win2003+ad (Mark)

Fri, 18 Jul 2008 04:01:16 GMT

>[�� ]
>� � �� ads - � ��
>�� tickets ��, �� rpc (��
>�� Squid �� winbindd). �� 2 ��, �� DC c��
>Win2K3 R2 SP2
>
>��, �
>
>winbind use default domain = yes
>
>��

� �� smb.conf �� security = DOMAIN �� .

net rpc join -U user
Unable to find a suitable server
Unable to find a suitable server

�� wbinfo -u � wbinfo -g �� . � �� :
nsswitch/winbind_ads.c ..... Not a user account? atype=0x30000000 �� wbinfo -u

�� net rpc join �� . �� smb.conf �� ? �� win 2003 native ?

samba + win2003+ad (PJ)

Thu, 17 Jul 2008 18:51:48 GMT

>[�� ]
>
> default_domain = PODR.ORGZAP.RU
> }
>[domain_realm]
> .podr.orgzap.ru = podr.orgzap.ru
> podr.orgzap.ru = podr.orgzap.ru
>
> .PODR.ORGZAP.RU = PODR.ORGZAP.RU
> PODR.ORGZAP.RU = PODR.ORGZAP.RU
>

� �� ? �� RPC �� ads

security = DOMAIN

�� net rpc join �� net ads join

� � �� ads - � �� tickets ��, �� rpc (�� Squid �� winbindd). �� 2 ��, �� DC c�� Win2K3 R2 SP2

��, �

winbind use default domain = yes

��

samba + win2003+ad (Mark)

Thu, 17 Jul 2008 09:42:12 GMT

>smb.conf
>krb5.conf
>
>�� ...

�� .

smb.conf

[global]

;auth methods = winbind

workgroup = PODR
server string = Linux Server
security = ADS
; allow trusted domains = No

; hosts allow = 10.100.4. 10.100.5. 127.
hosts allow = 10. 127.
time server = Yes
log file = /var/log/samba.%m
max log size = 50

password server = dc-01.podr.orgzap.ru

realm = PODR.ORGZAP.RU

;; passdb backend = tdbsam
socket options = TCP_NODELAY
local master = no
os level = 0
domain master = no
preferred master = no
dns proxy = no

display charset = koi8-r
unix charset = koi8-r
dos charset = cp866

encrypt passwords = yes

allow trusted domains = No
;winbind use default domain = yes
;winbind trusted domains only = yes
winbind uid = 10000-20000
winbind gid = 10000-20000
;idmap uid = 10000-20000
;idmap gid = 10000-20000
;winbind enum users = yes
;winbind enum groups = ye

samba + win2003+ad (PJ)

Wed, 16 Jul 2008 12:13:20 GMT

smb.conf
krb5.conf

�� ...