[Samba] Samba 3.0.2 and Windows 2003 ADS.

Gerald (Jerry) Carter jerry at samba.org
Fri Jan 30 15:16:13 GMT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Christian Arguello wrote:

| [root at proton root]# klist tickets
| klist: No credentials cache found
| (ticket cache FILE:tickets)

smbd doesn't use a keytab yet.  Its all done in memory.

| [libdefaults]
|  ticket_lifetime = 24000
|  default_realm = DOMAIN2003.COM
|  dns_lookup_realm = false
|  dns_lookup_kdc = false
|  default_tkt_enctypes = DES-CBC-MD5
|  default_tgs_enctypes = DES-CBC-MD5

Looks ok.  Do you have other kerberized services on
the box that require the default realm?

| And my smb.conf like this:
|
| [global]
|         workgroup = domain2003
|         security = ADS
|         realm = domain2003.com

There was a time when the realm had to be defined in
the correct case (usually upper).  I can't remember if
we work around that now or not.




cheers, jerry
~ ----------------------------------------------------------------------
~ Hewlett-Packard            ------------------------- http://www.hp.com
~ SAMBA Team                 ---------------------- http://www.samba.org
~ GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAGnU9IR7qMdg1EfYRAmCUAKDP/xWj6e7FQbvlMkV30S4MckCQ6QCgjn2j
ZsIxJboIim8hhx5Kv0C4j24=
=qrhF
-----END PGP SIGNATURE-----



More information about the samba mailing list