[Samba] Samba 4 AD share: Access denied

steve steve at steve-ss.com
Tue Jul 29 11:31:42 MDT 2014

On Tue, 2014-07-29 at 09:01 -0400, Ryan Ashley wrote:

> Before I change anything, I would like to know what that keytab file 
> does.

In kerberos, not only does the user have to authenticate, but also the
machine upon which the user is working on or the machine which is
offering the cifs service in the domain. The host/ and machine keys in
the keytab must match their originals in the KDC. samba can
automatically produce the correct keytab for you when you join the

More information about the samba mailing list