[Samba] Urgent... winbind and keytab file creation
Gerald (Jerry) Carter
jerry at samba.org
Wed Apr 2 15:39:43 GMT 2008
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Oliver Weinmann wrote:
> Ok. i got it. I had to change the parameter for:
>
> krb5_ccache_type = FILE
>
> now the users get a "cached" ticket at login. COOL :)
>
> but when the automount daemon tries to mount their home it fails:
>
> Apr 2 16:41:09 rhel4wbtest2 rpc.gssd[1793]: WARNING: Failed to create
> krb5 context for user with uid 82967 for server ds-san-02.vegagroup.net
> Apr 2 16:41:12 rhel4wbtest2 rpc.gssd[1793]: rpcsec_gss:
> gss_init_sec_context: (major) Miscellaneous failure - (minor) No
> credentials found with supported encryption types
I expect the nfsv4 service is trying to use 3des or aes.
I always set these enc types in /etc/krb5.conf
[libdefaults]
default_tgs_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5
default_tkt_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5
preferred_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC
cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFH86i/IR7qMdg1EfYRAiQcAJ9PoxRrBKYjWxhDcqc8pKsRAok8nQCeMIOF
Y9bRg2KlV5qXK9u65e0WK6U=
=Cgv+
-----END PGP SIGNATURE-----
More information about the samba
mailing list