[Samba] Urgent... winbind and keytab file creation

Gerald (Jerry) Carter jerry at samba.org
Wed Apr 2 15:39:43 GMT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Oliver Weinmann wrote:
> Ok. i got it. I had to change the parameter for:
> 
> krb5_ccache_type = FILE
> 
> now the users get a "cached" ticket at login. COOL :)
> 
> but when the automount daemon tries to mount their home it fails:
> 
> Apr  2 16:41:09 rhel4wbtest2 rpc.gssd[1793]: WARNING: Failed to create
> krb5 context for user with uid 82967 for server ds-san-02.vegagroup.net
> Apr  2 16:41:12 rhel4wbtest2 rpc.gssd[1793]: rpcsec_gss:
> gss_init_sec_context: (major) Miscellaneous failure - (minor) No
> credentials found with supported encryption types


I expect the nfsv4 service is trying to use 3des or aes.
I always set these enc types in /etc/krb5.conf

[libdefaults]
    default_tgs_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5
    default_tkt_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5
    preferred_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC







cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFH86i/IR7qMdg1EfYRAiQcAJ9PoxRrBKYjWxhDcqc8pKsRAok8nQCeMIOF
Y9bRg2KlV5qXK9u65e0WK6U=
=Cgv+
-----END PGP SIGNATURE-----


More information about the samba mailing list