[Samba] kinit fails

[Jeremy Allison]

On Tue, May 09, 2006 at 03:54:13PM -0400, Gwen Parker wrote:
> I'm trying to configure a Solaris 8 system to authenticate Samba against 
> Windows 2003 ADS.  I've compiled the appropriate packages; however, I'm 
> quickly stuck trying to get my kerberos ticket.   Here's the error:
> 
> sumac:/opt/local/kerberos5/bin# ./kinit admin at DCRI.DUKE.NET
> kinit(v5): Cannot resolve network address for KDC in requested realm while 
> 
> getting initial credentials
> 
> Here's the lowdown:
> Samba client -- sumac.dcri.duke.edu  152.16.48.61
> ADS server - vmsodium.dcri.duke.net 10.0.101.65
> 
> My /etc/resolv.conf 
> 
> sumac:/opt/local/kerberos5/bin# more /etc/resolv.conf
> domain dcri.duke.edu
> nameserver 152.16.48.78
> nameserver 152.16.49.44
> nameserver 152.16.49.47
> 
> Although I rather not modify my /etc/resolv.conf, I've read that this 
> error is due to DNS lookups.  I am able to resolve using nslookup.   I 
> have tried 1) adding my ADS server's IP to /etc/resolv.conf and a "search 
> dcri.duke.net" line.  I've also tried using the IP in the krb5.conf file. 
> I can't get past that error.  Here is my /etc/krb5.conf.. 
> 
> [libdefaults]
>         default_realm = dcri.duke.net
> 
> 
> [realms]
>         dcri.duke.net = {
> #       kdc = vmsodium.dcri.duke.net
>         kdc = 10.0.101.65
>         }
> 
> [domain_realms]
>         .kerberos.server = dcri.duke.net

I think realm names are case sensititve. DCRI.DUKE.NET doesn't match dcri.duke.net.

Jeremy.