[Samba] smbclient and Kerberos

Kevr kevr at protonmail.com
Fri Nov 4 20:10:50 UTC 2016


Hi All

Is this behaviour expected in smbclient:

I have a kerberized Samba server and a share that works as expected on desktop clients, but when I use smbclient with a valid ticket with the -k flag I get a KDC lookup failure

kev at client:/home/testuser$ smbclient -k -L //fileserver
gss_init_sec_context failed with [ Miscellaneous failure (see text): unable to reach any KDC in realm LAN]
SPNEGO(gse_krb5) creating NEG_TOKEN_INIT failed: NT_STATUS_INTERNAL_ERROR
session setup failed: NT_STATUS_INTERNAL_ERROR

I've noticed that if I configure the KDC server in the [realm] section of my /etc/krb5.conf everything works fine.

Does smbclient not use the DNS for KDC lookup?

I am using version Version 4.3.11-Ubuntu on Ubuntu 16.04.1

Thanks



Kevin Ratcliffe

Sent from [ProtonMail](https://protonmail.ch)


More information about the samba mailing list