[Samba] problem, and resolution, with 3.4.3 and active directory

[Philip Brown]

A little bit of Q & A, for anyone else who may run into this mess.

I had a previously working 3.2.4 install, and was looking to upgrade to 
3.4.3, in a new location.
My machine is configured to be a member of an Active Directory domain, and 
be a basic file sharing server.


I had copied over and adjusted smb.conf, and secrets.tdb
But it just wasnt working.
smbd was dying, with no useful error. Trying to start it with
smbd -F   or  smbd -d 1 was no help. It died with a plain,
"Abort"

Trying "net ads testjoin" was working with the old binaries, but failing for 
the "new" ones.

The resolution, was to fix my kerberos libs.
Turned out that the "old" version of samba, was compiled against newer kerb 
libs.
Whereas the "new" binaries, had gotten compiled with kerb 5-1.4.3.

This apparently makes those things crash badly.

I installed a fresh set of kerb 5-1.7 libs, recompiled, and things are happy 
now :-)


BTW: a debug output of "net ads testjoin" in the bad crashing situation, 
looks like this:


[2009/11/16 18:44:59,  3] libsmb/clikrb5.c:687(ads_krb5_mk_req)
   ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)
[2009/11/16 18:44:59, 10] libads/sasl.c:809(ads_sasl_spnego_bind)
   ads_sasl_spnego_krb5_bind failed with: No credentials cache found, 
calling kinit
[2009/11/16 18:44:59, 10] libads/kerberos.c:184(kerberos_kinit_password_ext)
   kerberos_kinit_password: as HAMACHI$@XXX.USC.EDU using [MEMORY:net_ads] 
as ccache and config [/var/local/var/locks/smb_krb5/krb5.conf.XXX

(Segfault)



-- 
Binary packages for Solaris, via pkg-get, at http://www.opencsw.org