[Samba] samba4 ticket server cifs/ not found in keytab
mailinglist at northstate.net
Thu Apr 26 15:55:50 UTC 2018
On 2018-04-26 10:17, listmail via samba wrote:
> On 2018-04-26 09:59, Rowland Penny via samba wrote:
>> I think you need to read this wiki page:
> I wont argue you that, I inherited this config and only know enough
> about samba to be dangerous ;)
>> Finally, the error message is telling you that 'nas1dev.external.com'
>> needs an SPN and this also needs to be in /etc/krb5.keytab
> What I want to understand it why I need this SPN when accessing this
> host from windows client in another domain, but when I access from IP
> or from Linux to DNS this isn't an issue. Also I am not sure how i
> add a SPN for a domain it is not a member of (in this case
> AD.INTERNALONE). He is a member of AD.INTERNALTWO.
> Thanks for the feedback
> - Richie
I am still verifying, but I believe I have solved this with:
net ads keytab add host/nas1dev-rhel7.external.com at AD.INTERNALTWO.COM -U
The support and feedback on config issues is highly appreciated.
More information about the samba