[Samba] Samba 3.0.6 & Krb5-1.3.4 problems

Daniel Mueller d.mueller at jobfactory.ch
Mon Sep 13 11:47:18 GMT 2004


Hello fellow Samba Administrators.

We've been serving data with samba2 to our company for 1 1/2 year now.
Now we want to go one step further: Samba 3 with ADS integration.

I've installed a test Linux box (2.6.8 Slackware 10.0) and installed the 
following software form source:

x Linux-PAM-0.77 (pain ./configure)

x openldap-2.2.15 (./configure --disable-slapd --disable-slurpd)

x acl-2.2.15 (plain ./configure & make install-dev)

x krb5-1.3.4 (./configure --prefix=/usr/local/kerberos
--without-krb4 --enable-dns --enable-dns-for-kdc --enable-dns-for-realm 
--enable-shared)

x samba-3.0.6 (./configure --prefix=/usr/local/samba --with-smbwrapper 
--with-dce-dfs
--with-ads --with-smbmount --with-pam --with-libsmbclient 
--with-acl-support --with-winbind
--with-krb5=/usr/local/kerberos --with-quotas --with-ldap)

Sofar so good. Since everything works as i expected it to work. i was 
able to join the samba
server to the ADS i can connect form a windows 2000 client to the 
shares. i can use the
ADS groups and users on the samba server (which is soooo goooood! :) ) 
and everything is fine.

but. I cant manage the permissions form a windows client... i get the 
"permission denied" message
each and every time i try to save changes i made to the permissions of a 
share...

i dont know if this has anything to do with the following error message 
i got in my log.smbd:

smbd/kerberos_verify.c:ads_keytab_verify_ticket(61)
ads_keytab_verify_ticket: krb5_kt_start_seq_get failed (No such file of 
directory)
smbd/sesssetup.c:reply_spnego_kerberos(265)
make_server_info_from_pw failed!

i get this messages like every time i connect to a samba share... and 
every time i do something to the share (touching files, folders etc.)

anyone have to same problem? help badly needed here...

thanks

Daniel


More information about the samba mailing list