inconsistent drive mappings + many other errors
Grimes, David
david.grimes at belointeractive.com
Thu Jul 15 17:53:54 GMT 2004
And the reference to ENCTYPE_ARCFOUR_HMAC_MD5?
And since I have your attention ;) Any idea what this error from messages is
pam_winbind[19990]: pam_parse: unknown option; service=system-auth
cat /etc/pam.d/samba
auth required /lib/security/pam_winbind.so nodelay
account required /lib/security/pam_winbind.so service=system-auth
session required /lib/security/pam_winbind.so service=system-auth
session required /lib/security/pam_mkhomedir.so skel=/etc/skel
umask=0022
password required /lib/security/pam_winbind.so nodelay
smbconf=/etc/samba/smb.conf
No binary RPM's for the latest (1.3.4) krb5 so I'm gonnna compile from
source. I will report my results to the list for archiving. I'm also doing a
detailed write-up for our subsidiaries I will contribute that to the list as
well.
DG
-----Original Message-----
From: Jeremy Allison [mailto:jra at samba.org]
Sent: Thursday, July 15, 2004 12:45 PM
To: Grimes, David
Cc: Jeremy Allison; samba-technical at lists.samba.org
Subject: Re: inconsistent drive mappings + many other errors
On Thu, Jul 15, 2004 at 12:43:07PM -0500, Grimes, David wrote:
> Wow I stand corrected. The circumstances around this problem totally mask
> that it's an encryption problem. SO... I'm not sure how to interpret your
> statement "you have not included the type 23 enctype used by Windows
> (ENCTYPE_ARCFOUR_HMAC_MD5)". How do I this inclusion? Do I just flat out
> remove those default* lines from krb5.conf?
Yes.
> Also....
> rpm -qa | grep krb5
> krb5-devel-1.2.7-24
> krb5-workstation-1.2.7-24
> krb5-libs-1.2.7-24
> pam_krb5-1.73-1
> Rectifying this now....
I think these may be too old to have the correct enctype. You need
1.3.1 or later I think.
Jeremy.
More information about the samba-technical
mailing list