[Samba] AD integration - Administrator can log in but no one else can

[L.P.H. van Belle]

Hai, 

>I changed the case, and removed /etc/krb5.conf (replaced it 
>with an empty
>file) which should force samba to go to the kerberos servers.  Now my
>users can access their shares, my groups work, life is good.
>

If you removed krb5.conf and put an empty file back, you wil get troubles. 
Just setup your krb5.conf correct. 

like : 

[logging]
        Default = FILE:/var/log/krb5.log

[libdefaults]
        ticket_lifetime = 24000
        clock-skew = 300
        default_realm = test.server.com
        dns_lookup_realm = false
        dns_lookup_kdc = false

[realms]
        test.example.com = {
                kdc = example.test.server.com:88
                admin_server = example.test.server.com:464
                default_domain = test.server.com        

}

[domain_realm]
        .server.com = test.server.com
        server.com = test.server.com

greetz, 

Louis



>-----Oorspronkelijk bericht-----
>Van: yan at seiner.com [mailto:samba-bounces at lists.samba.org] 
>Namens yan at seiner.com
>Verzonden: vrijdag 7 februari 2014 13:37
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] AD integration - Administrator can log 
>in but no one else can
>
>>> On Fri, 2014-02-07 at 10:36 +0100, L.P.H. van Belle wrote:
>>>> Hai,
>>>>
>>>> In you globel smb.conf
>>>> set realm in CAPS.
>>>>
>>>> is see your workgroup = HPM
>>>>
>>>> but administrator auths with : WIKI\Administrator
>>>> and your users with :
>>>> wbinfo -u
>>>> ...
>>>> HPM\yans
>>>>
>>>> so this isnt right im thinking.. , is you servername WIKI ?
>>>>
>>>> regards,
>>>>
>>>> Louis
>>>>
>>> I'd add to that, take Likewise out of the equation for the moment.
>>
>> How do I do that?
>
>Thanks guys!
>
>I changed the case, and removed /etc/krb5.conf (replaced it 
>with an empty
>file) which should force samba to go to the kerberos servers.  Now my
>users can access their shares, my groups work, life is good.
>
>:)
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>