dns.keytab

[Matthieu Patou]

Hello Mohammad,

On 18/12/2011 10:04, Gémes Géza wrote:
> Hi,
>
> First of all as I'm not the most authoritative source of information
> please remain on the samba-technical mailing list (this thread could be
> beneficial to others too).
>
>
>> run and export keytab  and chmod 777 (for test)
>>> samba-tool domain exportkeytab/usr/local/samba/private/dns.keytab
>> --realm=samba.example.com<http://samba.example.com>
>> but on restart bind
>> see this error?
>>
>> default realm from krb5.conf (samba.example.com
>> <http://samba.example.com>) does not match tkey-gssapi-credential
>> (DNS/samba4.samba.example.com<http://samba4.samba.example.com>)
>> configuring TKEY: failure
>>   loading configuration: failure
>> exiting (due to fatal error)
>>
>> what happen?

Can you first run ldbsearch -H 
<path_to_your_samba_provision>/private/sam.ldb -s base dn

This will gives us the correct realm of your domain.

Matthieu.

-- 
Matthieu Patou
Samba Team
http://samba.org