[Samba] Mac OS X clients not binding to a Samba+LDAP PDC

[David Martinez]

Hi there !

This is my first post and I really would like to have this stuff working ...
if not, I should go to Win2k3 server .... please help me to avoid it !!!!

I've been trying to integrate Mac OS X (10.3) clients to my Samba server
through the Active Directory Plugin with no success. This PDC is currently
working for 90 PC's with XP SP2.

My server is well configured from the DNS (or I think so):

ns              A       192.168.101.50
ldap            A       192.168.101.50
pruebas         A       192.168.101.50
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs SRV    0 100 389
pruebas.valeeuro.com
_ldap._tcp.dc._msdcs           SRV    0 100 389 pruebas.valeeuro.com
_ldap._tcp.aab455e4-bbb2-408b-a097-bb359f315574.domains._msdcs SRV    0 100
389 pruebas.valeeuro.com
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs SRV    0 100 389
pruebas.valeeuro.com
_ldap._tcp.gc._msdcs           SRV    0 100 389 pruebas.valeeuro.com
_ldap._tcp.pdc._msdcs          SRV    0 100 389 pruebas.valeeuro.com
_gc._tcp.Default-First-Site-Name._sites SRV    0 100 389
pruebas.valeeuro.com
_ldap._tcp.Default-First-Site-Name._sites SRV    0 100 389
pruebas.valeeuro.com
_gc._tcp                       SRV    0 100 389 pruebas.valeeuro.com
_ldap._tcp                     SRV    0 100 389 pruebas.valeeuro.com

When I try to bind the Mac computer to the domain it stops on step 3 and
sends an error "Invalid username and password"

As I see, the Mac is trying to connect using kerberos authentication, which
I dont know how to configure on the samba+ldap!!
¿How do I enable kerberos authentication on my LDAP+SAMBA+Linux server?


My configuration:
samba 3.0.20
openldap 2.2.23 (openldap is the backend for samba)
bind 9.3
linux fedora core 4


Thanks in advance !!!


Saludos
David

--
Saludos
David