[Samba-it] trust secret via RPC calls failed a tempo

Umberto Perroni u.perroni at aceaspa.it
Tue Jan 18 16:31:01 MST 2005


Salve, il server linux con winbind si connette regolarmente al mio server
ADS con

Il comando net ads join -U administrator   dopodiche' wbinfo .t mi risponde
correttamente

checking the trust secret via RPC calls succeeded 

Poi dopo qualche minuto alla nuova richiesta wbinfo -t mi risponde:

checking the trust secret via RPC calls failed

error code was NT_STATUS_ACCESS_DENIED (0xc0000022)

Could not check secret

 

Rifaccio il comando net ads join -U  e ritorna tutto OK per altri 

Pochi minuti

 

Questo e' il mio file /etc/krb5.conf

 

 

[logging]

 default = FILE:/var/log/krb5libs.log

 kdc = FILE:/var/log/krb5kdc.log

 admin_server = FILE:/var/log/kadmind.log

 

[libdefaults]

 default_realm = MIODOMINIO.IT

 dns_lookup_realm = false

 dns_lookup_kdc = false

 

[realms]

 MIODOMINIO.IT = {

  kdc = iside.aceaspa.it:88

  admin_server = iside.aceaspa.it:749

  default_domain = aceaspa.it

 }

 

[domain_realm]

 .miodominio.it = MIODOMINIO.IT

 Miodominio.it = MIODOMINIO.IT

 

[kdc]

 profile = /var/kerberos/krb5kdc/kdc.conf

 

[appdefaults]

 pam = {

   debug = false

   ticket_lifetime = 36000

   renew_lifetime = 36000

   forwardable = true

   krb4_convert = false

 }

 

Questo invece e' il smb.conf

 

[global]

    # general options

    workgroup = TI

    netbios name = ALNILAM

    local master = no

    domain master = no

    os level = 2

    log level = 5

    wins support = no

    log file = /var/log/samba/log.%m

    max log size = 50

 

    # winbindd configuration

    winbind separator = +

    idmap uid = 10000-20000

    idmap gid = 10000-20000

    winbind uid = 10000-20000

    winbind gid = 10000-20000

    winbind enum users = yes

    winbind enum groups = yes

    winbind cache time = 10

    template homedir = /home/%D/%U

    template shell = /bin/bash

    winbind use default domain = yes

    security = ads

    password server = 172.16.11.2 172.16.11.3

    encrypt passwords = yes

    realm = aceaspa.it

 

Avete qualche idea??

Grazie mille

 

 

Umberto Perroni

 

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/samba-it/attachments/20050118/2c4fc3e6/attachment.html>


More information about the samba-it mailing list