[Samba] kerberos auth fails in samba3.0 alpha23
more0401 at sina.com
Wed Apr 16 05:31:37 GMT 2003
Hi, I think I should append this information:
I use "net ads join" to join my computer to win2k AD domain, the system
prompt to let me input root password. But I have maken a Administrator
key in win2k AD domain in my Linux box.
It is not useful to input a password for there is not "root" account in
the win2k AD domain at all. "net ads join" outputs as blow:
[2003/04/16 13:21:04, 1] libsmb/clikrb5.c:krb5_mk_req2(266)
krb5_cc_get_principal failed (No credentials cache file found)
[2003/04/16 13:21:04, 0] libads/kerberos.c:ads_kinit_password(132)
kerberos_kinit_password root at RAIDTEC.CHINA failed: Client not found in
[2003/04/16 13:21:04, 1] utils/net_ads.c:ads_startup(160)
ads_connect: Invalid credentials
I just puzzled why samba asks for root account now, any help will be
> I build an alpha23 samba3.0 system in win2k AD domain. Just a few days
> ago, it works very well. But in recent, I find it cannot work.
> I am sure it is the reason for kerberos authority. When I kinit a
> ticket successfully, it fails to run "smbclient \\Win2K-server\c$ -k",
> the error message will be as blow:
> Doing spnego session setup (blob length=109)
> Doing kerberos session setup
> session setup failed: NT_STATUS_MORE_PROCESSING_REQUIRED
> When I run "getent passwd", it also fails to display the domain users.
> When I run "wbinfo -u", it echos "Error looking up domain users".
> But I am sure kerberos ticket works correctly, for I can run kpasswd
> to change the Administrator at Win2kDomain password.
> I am puzzled, I wish if anyone has any help.
More information about the samba