[Samba] problem, and resolution, with 3.4.3 and active directory

Philip Brown ppb at usc.edu
Tue Nov 17 12:37:47 MST 2009

A little bit of Q & A, for anyone else who may run into this mess.

I had a previously working 3.2.4 install, and was looking to upgrade to 
3.4.3, in a new location.
My machine is configured to be a member of an Active Directory domain, and 
be a basic file sharing server.

I had copied over and adjusted smb.conf, and secrets.tdb
But it just wasnt working.
smbd was dying, with no useful error. Trying to start it with
smbd -F   or  smbd -d 1 was no help. It died with a plain,

Trying "net ads testjoin" was working with the old binaries, but failing for 
the "new" ones.

The resolution, was to fix my kerberos libs.
Turned out that the "old" version of samba, was compiled against newer kerb 
Whereas the "new" binaries, had gotten compiled with kerb 5-1.4.3.

This apparently makes those things crash badly.

I installed a fresh set of kerb 5-1.7 libs, recompiled, and things are happy 
now :-)

BTW: a debug output of "net ads testjoin" in the bad crashing situation, 
looks like this:

[2009/11/16 18:44:59,  3] libsmb/clikrb5.c:687(ads_krb5_mk_req)
   ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)
[2009/11/16 18:44:59, 10] libads/sasl.c:809(ads_sasl_spnego_bind)
   ads_sasl_spnego_krb5_bind failed with: No credentials cache found, 
calling kinit
[2009/11/16 18:44:59, 10] libads/kerberos.c:184(kerberos_kinit_password_ext)
   kerberos_kinit_password: as HAMACHI$@XXX.USC.EDU using [MEMORY:net_ads] 
as ccache and config [/var/local/var/locks/smb_krb5/krb5.conf.XXX


Binary packages for Solaris, via pkg-get, at http://www.opencsw.org

More information about the samba mailing list