[Samba] Samba 4 configuration trouble.

Daniel Müller mueller at tropenklinik.de
Mon Oct 10 00:12:21 MDT 2011


Domain and REALM should be a part of each other.
EX: realm:tuebingen.tst.lc, domain: tuebingen

-----------------------------------------------
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------
-----Ursprüngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im
Auftrag von Arturo Limón
Gesendet: Sonntag, 9. Oktober 2011 22:31
An: samba at lists.samba.org
Betreff: Re: [Samba] Samba 4 configuration trouble.

Thank you for your message.

Finally it works ...!!! :-)

It looked there were several problems; one was using "localhost" as hostname
(I made a too quick installation); other was not having the own server in
/etc/resolv.con; and the last one is that it looks like there must be a
match between --realm first term and --domain in provision call; I mean:

--realm=PEPE.MYSITE.COM --domain=PEPE ... works

but ...

--realm=JUAN.MYSITE.COM --domain=PEPE ... does not work.

I do not know if it is really like this or I messed too much all
configurations.

I plan to put a small SAMBA 4 in production in my office; I will continue
tomorrow with it.

Regards,



2011/10/9 Jorell <JorellF at fastmail.net>

> I don't think "localhost" should be in any reply to a DNS query.
> You might what to check you hostname.
> /etc/hosts
> /etc/sysconfig/network
> /etc/sysconfig/network-**scripts/ifcfg-eth0
> and in you named.conf
>
>
> On 10/9/2011 6:27 AM, Arturo Limón wrote:
> > Hello,
> >
> > Thank you for your answer.
> >
> > Samba is running, firewall is disabled and selinux too. DNS works OK
both
> from the Linux box and from the LAN.
> >
> >
> On 10/9/2011 2:23 AM, Jorell wrote:
>
>> Is samba running?
>> My only other suggestion is to double check the firewall or stop it.
>>
>> On 10/8/2011 3:25 PM, Arturo Limón wrote:
>>
>>> Hello,
>>>
>>> I'm trying to setup a Samba 4 sever (Alpha 18) over Centos 6 32 bits.
>>> I have
>>> followed directions in
http://wiki.samba.org/index.**php/Samba4/HOWTO<http://wiki.samba.org/index.p
hp/Samba4/HOWTO>
>>>
>>> Everything has gone OK up to Step 9, Testing kerberos.
>>>
>>> kinit administrator at PDC.**IESMSANTILLANA.LAN
>>>
>>> Returns (red color is mine, not from computer)...
>>>
>>> kinit: Server not found in Kerberos database while getting initial
>>> credentials
>>>
>>> If I try ...
>>>
>>> kinit administrator at IESMSANTILLANA.**LAN
>>>
>>> I get ...
>>>
>>> kinit: Cannot resolve network address for KDC in realm
>>> "IESMSANTILLANA.LAN"
>>> while getting initial credentials
>>>
>>> In step 8 if I key ...
>>>
>>> host -t SRV _kerberos._udp.pdc.**iesmsantillana.lan
>>>
>>> I get ...
>>>
>>> _kerberos._udp.pdc.**iesmsantillana.lan has SRV record 0 100 88
>>> localhost.pdc.iesmsantillana.**lan.
>>>
>>> my /etc/krb5.conf looks:
>>>
>>> [libdefaults]
>>> default_realm = IESMSANTILLANA.LAN
>>> dns_lookup_realm = false
>>> dns_lookup_kdc = true
>>>
>>> nmap localhost shows:
>>>
>>> PORT STATE SERVICE
>>> 25/tcp open smtp
>>> 53/tcp open domain
>>> 88/tcp open kerberos-sec
>>> 111/tcp open rpcbind
>>> 135/tcp open msrpc
>>> 139/tcp open netbios-ssn
>>> 389/tcp open ldap
>>> 445/tcp open microsoft-ds
>>> 464/tcp open kpasswd5
>>> 631/tcp open ipp
>>> 636/tcp open ldapssl
>>> 1024/tcp open kdm
>>> 3268/tcp open globalcatLDAP
>>> 3269/tcp open globalcatLDAPssl
>>>
>>> I am not an expert in Kerberos and I have no idea of what can be
>>> wrong, or
>>> what can I have done wrong. Workstations cannot join domain; I get a
>>> "User
>>> unknown / Password not found error message".
>>>
>>> Any help will be greatly appreciated; I am very interested in having it
>>> running.
>>>
>>> Regards,
>>>
>>> Arturo Limon
>>>
>>
>>
>>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:
https://lists.samba.org/**mailman/options/samba<https://lists.samba.org/mail
man/options/samba>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



More information about the samba mailing list