[cifs-protocol] Clarify reserved bytes that are in fact used in LogonSamLogonEx response

[Hongwei Sun]

Andrew,

  Thanks for the information.  It fixed the problem.  Now I don't receive any error other than the expected ones.

Hongwei

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org]
Sent: Monday, August 03, 2009 2:39 AM
To: Hongwei Sun
Cc: Nick Meier; Sebastian Canevari; pfif at tridgell.net; cifs-protocol at samba.org
Subject: RE: [cifs-protocol] Clarify reserved bytes that are in fact used in LogonSamLogonEx response

On Fri, 2009-07-31 at 00:30 +0000, Hongwei Sun wrote:
> Andrew,
>
>   We are able to set up environment with a W2k8 server joined to Samba domain.  I ran the three commands you mentioned in your e-mail.
>
> bin/smbclient //win2008-2/test -Uadministrator%samba2 -d1 -kno
> bin/smbclient //win2008-2/test -Uadministrator%samba2 -d1 -kyes
> bin/smbclient //win2008-2/test -Uadministrator%samba2 -d1 -kyes
> --option=gensec:spnego=no --option=gensec:gssapi_spnego=yes
>
>    I get the same error as you in the first command that is basically
> using NTLM.  But I have problem with the next two commands that use
> Kerberos.  Please see the errors returned on screen shots.

Any chance you can include these as text next time?  (it just makes it easier to quote etc).

As I see it, you need to put:

[libdefaults]
 default_realm = SAMBA4.NET
 dns_lookup_realm = true
 dns_lookup_kdc = true

into your /etc/krb5.conf

(assuming you can get to samba4.net with DNS, otherwise add a manual KDC declaration).

Andrew Bartlett
--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.