Matthieu Patou mat at samba.org
Sun Dec 18 04:54:05 MST 2011

Hello Mohammad,

On 18/12/2011 10:04, Gémes Géza wrote:
> Hi,
> First of all as I'm not the most authoritative source of information
> please remain on the samba-technical mailing list (this thread could be
> beneficial to others too).
>> run and export keytab  and chmod 777 (for test)
>>> samba-tool domain exportkeytab/usr/local/samba/private/dns.keytab
>> --realm=samba.example.com<http://samba.example.com>
>> but on restart bind
>> see this error?
>> default realm from krb5.conf (samba.example.com
>> <http://samba.example.com>) does not match tkey-gssapi-credential
>> (DNS/samba4.samba.example.com<http://samba4.samba.example.com>)
>> configuring TKEY: failure
>>   loading configuration: failure
>> exiting (due to fatal error)
>> what happen?

Can you first run ldbsearch -H 
<path_to_your_samba_provision>/private/sam.ldb -s base dn

This will gives us the correct realm of your domain.


Matthieu Patou
Samba Team

More information about the samba-technical mailing list