[Samba] Bizzare behaviour of Samba+ADS - help needed
Robert Bannocks
R.Bannocks at nhm.ac.uk
Wed Mar 21 09:56:53 GMT 2007
My message only got one reply. This is still a problem for me. I am
wondering if this is the right forum for this kind of question? Is
there a better or more appropriate place to ask. This is strange
behaviour of Samba and needs looking into.
Rob
> -----Original Message-----
> From: samba-bounces+r.bannocks=nhm.ac.uk at lists.samba.org
[mailto:samba-
> bounces+r.bannocks=nhm.ac.uk at lists.samba.org] On Behalf Of Robert
Bannocks
> Sent: 20 March 2007 14:02
> To: Don McCall; samba at lists.samba.org
> Subject: RE: [Samba] Bizzare behaviour of Samba+ADS - help needed
>
> Thanks, but no the code is correctly picking up the location to write
> the keytab file. There is something altogether more strange here.
>
> RB
>
> > -----Original Message-----
> > From: Don McCall [mailto:donmccall1 at yahoo.com]
> > Sent: 20 March 2007 13:39
> > To: Robert Bannocks; samba at lists.samba.org
> > Subject: Re: [Samba] Bizzare behaviour of Samba+ADS - help needed
> >
> > Hi Robert,
> > you may temporarily need to add the following line to your krb5.conf
> file
> > under [libdefaults] section, while you run the net ads keytab
create:
> >
> > default_keytab_name="WRFILE:/etc/krb5.keytab"
> >
> > After you generate the keytab file, you can remove this line.
> > hope it helps,
> > Don
> >
> >
> >
> > ----- Original Message ----
> > From: Robert Bannocks <R.Bannocks at nhm.ac.uk>
> > To: samba at lists.samba.org
> > Sent: Tuesday, March 20, 2007 7:48:42 AM
> > Subject: [Samba] Bizzare behaviour of Samba+ADS - help needed
> >
> >
> > I have samba+ads working fine *HOWEVER* when I run net ads keytab
> create
> > it fails.
> >
> > Using -d 10 the debug output says it cannot write to the file. This
> is
> > truly bizarre as I am running this as root!
> >
> > e.g.
> >
> > # /usr/local/opt/samba/samba-3.0.24/bin/net ads keytab create ; echo
> $?
> > 183
> >
> > And
> >
> > /usr/local/opt/samba/samba-3.0.24/bin/net -d 10 ads keytab create ;
> echo
> > $?
> >
> > Gives
> > [..snip..]
> > ads_get_kvno: Error Determining KVNO!
> > [2007/03/20 11:45:43, 3] libads/ldap.c:ads_get_kvno(1348)
> > ads_get_kvno: Windows 2000 does not support KVNO's, so this may be
> > normal.
> > [2007/03/20 11:45:43, 3]
> > libads/kerberos_keytab.c:smb_krb5_kt_add_entry(184)
> > ads_keytab_add_entry: adding keytab entry for
> > (host/host.nhm.ac.uk at NHM.AC.UK) with encryption type (1) and version
> (0)
> > [2007/03/20 11:45:43, 1]
> > libads/kerberos_keytab.c:smb_krb5_kt_add_entry(189)
> > ads_keytab_add_entry: adding entry to keytab failed (Cannot write
to
> > specified key table)
> > [2007/03/20 11:45:43, 1]
> > libads/kerberos_keytab.c:ads_keytab_add_entry(346)
> > ads_keytab_add_entry: Failed to add entry to keytab file
> > [2007/03/20 11:45:43, 1]
> > libads/kerberos_keytab.c:ads_keytab_create_default(513)
> > ads_keytab_create_default: ads_keytab_add_entry failed while
adding
> > 'host'.
> > [2007/03/20 11:45:43, 2] utils/net.c:main(988)
> > return code = -1765328201
> > 183
> >
> > The default keytab would be /etc/krb5.keytab
> >
> > Any help with this issue would be most appreciated. All the obvious
> > thinks are fine, e.g. /etc/ *is* writable
> > The keytab file does not exist before creation (an in fact touching
it
> > to a null file before running net ads create does not change the
> > behaviour either)
> >
> > Regards,
> >
> > RB
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/listinfo/samba
> >
> >
> >
> >
>
________________________________________________________________________
> __
> > __________
> > TV dinner still cooling?
> > Check out "Tonight's Picks" on Yahoo! TV.
> > http://tv.yahoo.com/
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
More information about the samba
mailing list