[Samba] Samba 3.0.2a and ADS w2k3 Kerberos authentication problem

[Aden, Steve]

Mapping by IP address causes samba to not use Kerberos.


Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. Opinions, conclusions and other information contained in this message that do not relate to official business shall be understood as neither given nor endorsed by ITS

-----Original Message-----
From: Jim McDonough [mailto:jmcd at us.ibm.com] 
Sent: Wednesday, April 14, 2004 9:23 AM
To: Duran Munoz, Pedro
Cc: samba at lists.samba.org; samba-bounces+jmcd=samba.org at lists.samba.org
Subject: Re: [Samba] Samba 3.0.2a and ADS w2k3 Kerberos authentication
problem






>I am using Samba 3.0.2a as Domain member into ADS w2k3 domain. net ads
>join -U administrator work fine.
>wbinfo -u and -g works fine.
>I am able to mapped Samba shares with IP address (\\192.168.0.x\share)
>but it does not works if I use netbios name ( \\redhat9\share) the
>system asks me for authentication but never I get into the Samba server
>( Login and password are invalid ).

>Kerberos packed is 1.2.27 default redhat9 included.
Well, when I read this last line, I assumed that you've just run into
the
w2k3 doesn't deal with non-rc4-hmac kerberos (that would be pre-1.3 MIT
kerberos), but it is strange that you can map via IP address...

There are several things to try here:
-upgrade kerberos to post 1.3
-try fixing windows, which has multiple options.  See
http://support.microsoft.com/default.aspx?scid=kb;en-us;833708

But the fact that it works via IP address puzzles me...

----------------------------
Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA

jmcd at us.ibm.com
jmcd at samba.org

Phone: (207) 885-5565
IBM tie-line: 776-9984
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


_____________________________________________________
This message was content-scanned by IXC Shield 
Powered by GatewayDefender - BH093739e7.00000001.mml