[Samba] problem, and resolution, with 3.4.3 and active directory
ppb at usc.edu
Tue Nov 17 12:37:47 MST 2009
A little bit of Q & A, for anyone else who may run into this mess.
I had a previously working 3.2.4 install, and was looking to upgrade to
3.4.3, in a new location.
My machine is configured to be a member of an Active Directory domain, and
be a basic file sharing server.
I had copied over and adjusted smb.conf, and secrets.tdb
But it just wasnt working.
smbd was dying, with no useful error. Trying to start it with
smbd -F or smbd -d 1 was no help. It died with a plain,
Trying "net ads testjoin" was working with the old binaries, but failing for
the "new" ones.
The resolution, was to fix my kerberos libs.
Turned out that the "old" version of samba, was compiled against newer kerb
Whereas the "new" binaries, had gotten compiled with kerb 5-1.4.3.
This apparently makes those things crash badly.
I installed a fresh set of kerb 5-1.7 libs, recompiled, and things are happy
BTW: a debug output of "net ads testjoin" in the bad crashing situation,
looks like this:
[2009/11/16 18:44:59, 3] libsmb/clikrb5.c:687(ads_krb5_mk_req)
ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)
[2009/11/16 18:44:59, 10] libads/sasl.c:809(ads_sasl_spnego_bind)
ads_sasl_spnego_krb5_bind failed with: No credentials cache found,
[2009/11/16 18:44:59, 10] libads/kerberos.c:184(kerberos_kinit_password_ext)
kerberos_kinit_password: as HAMACHI$@XXX.USC.EDU using [MEMORY:net_ads]
as ccache and config [/var/local/var/locks/smb_krb5/krb5.conf.XXX
Binary packages for Solaris, via pkg-get, at http://www.opencsw.org
More information about the samba