[Samba-it] trust secret via RPC calls failed a tempo
Umberto Perroni
u.perroni at aceaspa.it
Tue Jan 18 16:31:01 MST 2005
Salve, il server linux con winbind si connette regolarmente al mio server
ADS con
Il comando net ads join -U administrator dopodiche' wbinfo .t mi risponde
correttamente
checking the trust secret via RPC calls succeeded
Poi dopo qualche minuto alla nuova richiesta wbinfo -t mi risponde:
checking the trust secret via RPC calls failed
error code was NT_STATUS_ACCESS_DENIED (0xc0000022)
Could not check secret
Rifaccio il comando net ads join -U e ritorna tutto OK per altri
Pochi minuti
Questo e' il mio file /etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = MIODOMINIO.IT
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
MIODOMINIO.IT = {
kdc = iside.aceaspa.it:88
admin_server = iside.aceaspa.it:749
default_domain = aceaspa.it
}
[domain_realm]
.miodominio.it = MIODOMINIO.IT
Miodominio.it = MIODOMINIO.IT
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
Questo invece e' il smb.conf
[global]
# general options
workgroup = TI
netbios name = ALNILAM
local master = no
domain master = no
os level = 2
log level = 5
wins support = no
log file = /var/log/samba/log.%m
max log size = 50
# winbindd configuration
winbind separator = +
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
winbind cache time = 10
template homedir = /home/%D/%U
template shell = /bin/bash
winbind use default domain = yes
security = ads
password server = 172.16.11.2 172.16.11.3
encrypt passwords = yes
realm = aceaspa.it
Avete qualche idea??
Grazie mille
Umberto Perroni
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/samba-it/attachments/20050118/2c4fc3e6/attachment.html>
More information about the samba-it
mailing list