[Samba] Different kerberos build than listed in "Samba-3 By Example, " p. 225

[Edward W. Ray]

 Although I have the correct krb5 (1.3.1 running on a Red Hat Linux 9
system), I get the following result:

[root at ns2 root]# smbd -b | grep KRB
   HAVE_KRB5_H
   HAVE_ADDRTYPE_IN_KRB5_ADDRESS
   HAVE_KRB5
   HAVE_KRB5_AUTH_CON_SETUSERUSERKEY
   HAVE_KRB5_ENCRYPT_DATA
   HAVE_KRB5_FREE_DATA_CONTENTS
   HAVE_KRB5_FREE_KTYPES
   HAVE_KRB5_GET_PERMITTED_ENCTYPES
   HAVE_KRB5_KEYTAB_ENTRY_KEY
   HAVE_KRB5_LOCATE_KDC
   HAVE_KRB5_MK_REQ_EXTENDED
   HAVE_KRB5_PRINCIPAL2SALT
   HAVE_KRB5_PRINC_COMPONENT
   HAVE_KRB5_SET_DEFAULT_TGS_KTYPES
   HAVE_KRB5_SET_REAL_TIME
   HAVE_KRB5_STRING_TO_KEY
   HAVE_KRB5_TKT_ENC_PART2
   HAVE_KRB5_USE_ENCTYPE
   HAVE_LIBGSSAPI_KRB5
   HAVE_LIBKRB5

Which may explain this:

[root at ns2 root]# net ads join -U root

root password: 
[2004/04/27 20:43:14, 0] libads/kerberos.c:ads_kinit_password(133)
  kerberos_kinit_password root at MMICMANHOMENET.LOCAL failed: ASN.1 failed
call to system time library
[root at ns2 root]# kinit root at MMICMANHOMENET.LOCAL
Password for root at MMICMANHOMENET.LOCAL: 
kinit(v5): ASN.1 failed call to system time library while getting initial
credentials

Does anyone know how to rectify this?

-----Original Message-----
From: Gerald (Jerry) Carter [mailto:jerry at samba.org] 
Sent: Tuesday, April 27, 2004 7:40 AM
To: ewray at mmicman.com
Cc: samba at lists.samba.org
Subject: Re: [Samba] Anyone know where I can get Kerberos 1.3.1 RPMs???

Edward W. Ray wrote:

> From what I have read, the default kerberos (v1.2.7) in
 > Red Hat Linux 9 will not work for Windows 2003 AD
 > authentication/Samba.   I have looked and searched and
 > googled for the RPMs.  I would even settle for Fedora builds,
> but I cannot even find those.  I anyone has a clue as to
 > where I could find them, it would be appreciated.

These were built from the Fedora SRPMS and are what I
use for testing (they've been built to support DNS SRV
lookups for KDC's as well).

	http://samba.org/~jerry/RPMS/rh9/



cheers, jerry
----------------------------------------------------------------------
Hewlett-Packard            ------------------------- http://www.hp.com
SAMBA Team                 ---------------------- http://www.samba.org
GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." ----------- Sting