[Samba] Samba 4.1 as member server, problems doing password authentication using CentOS/RedHat 7 packages

Ty! Boyack Ty.Boyack at colostate.edu
Tue Apr 21 11:24:36 MDT 2015

On 04/20/2015 05:30 PM, Andrey Repin wrote:
> Greetings, Ty! Boyack!

Thanks, and Hi!
> I dumped (using testparm -v) all of the default settings, and found that
> With Samba 4, I've found the output of "samba-tool testparm" to be different
> from "testparm". The former looks more trustworthy to me.

I feel really foolish here -- but I don't see samba-tool as an installed 
binary or in any of the packages available via the repositsories we use 
for CentOS or Fedora. Is this part of the standard suite or samba

> Following smb.conf compare, I would compare krb5.conf, particularly the realm
> name and capitalization.
> Been bitten by that >.<

Good thought.  I use 'net ads join' to join the active directory domain, 
so that creates it's krb5 file on the fly in /var/lib/samba/smb_krb5.  
The contents of the files on each server is almost the same -- it is the 
same information (including capitalization -- you are right on that!) 
but the order of the KDCs is different.  I changed the order to make 
sure that is not the issue and confirmed that the behavior is the same.

I wonder if the package compilation invokes substantially different 
options for this behavior?  I don't know how to tell what configure 
options are used by the package creators.  Does anyone know if that is 
easy to discover?



    Ty Boyack
    NREL Senior IT Engineer
    Ty.Boyack at colostate.edu
    (970) 491-1186

More information about the samba mailing list