[Samba] Samba 3 with ADS problem

[Mike]

--- jasmine mary <jselvaraj at tiaa-cref.org> wrote:

> 
> 
> I have started my work of Samba authentication using AD with Samba
> 3.0.7,
> openldap-2.3.9,kerberos 1.4.3 on Solaris 8.

I am using Samba 3.0.22, openldap 2.3.21, MIT kerberos 1.4.3 on Solaris 8.  In my environment, I only managed to get security=ADS working with Samba 3.0.21c and 3.0.22. Any version before those didn't work for me.


> 
> smb.conf file
> 
> [global]
>         workgroup = SE
>         realm = se.jasmine.org

Try "realm = SE.JASMINE.ORG"
I also have "password server = *" in smb.conf.

My krb5.conf is below.
My site uses rc4-hmac encryption exclusively but yours may be different.

[libdefaults]
   default_realm = MYDOMAIN.COM
   default_tgs_enctypes = rc4-hmac
   default_tkt_enctypes = rc4-hmac
   permitted_enctypes = rc4-hmac
   forwardable = false
   proxiable = false

[domain_realms]
   .mydomain.com = MYDOMAIN.COM
   mydomain.com = MYDOMAIN.COM

L8r,
Mike