[Samba] unable to mount nfs4v over krb5 after samba upgrade.

Rowland Penny rpenny at samba.org
Fri Dec 14 14:20:34 UTC 2018


On Fri, 14 Dec 2018 19:14:28 +0530
VigneshDhanraj G via samba <samba at lists.samba.org> wrote:

> Hi Team,
> 
> Upgraded samba from 4.7. to 4.9.3. After upgrade unable to mount nfsv4
> through krb5 security.
> 
> smb.conf:
> 
> [Global]
> available= yes
> restrict anonymous= 0
> Workgroup= VIKY
> netbios name= viky
> realm= VIKY.LOCAL
> password server= 192.168.1.10, *
> idmap backend= tdb
> idmap uid= 5000-9999999
> idmap gid= 5000-9999999
> idmap config *: backend= rid
> idmap config *: range= 10000000-19999999
> security= ADS
> name resolve order= wins host bcast lmhosts
> client use spnego= yes
> dns proxy= no
> winbind use default domain= no
> winbind nested groups= yes
> inherit acls= yes
> winbind enum users= yes
> winbind enum groups= yes
> winbind separator= \\
> winbind cache time= 300
> winbind offline logon= true
> template shell= /bin/sh
> kerberos method= secrets and keytab
> map to guest= Bad User
> host msdfs= yes
> strict allocate= no
> encrypt passwords= yes
> passdb backend= smbpasswd
> printcap name= lpstat
> printable= no
> load printers= yes
> max smbd processes= 500
> getwd cache= yes
> syslog= 0
> use sendfile= yes
> log level= 0
> max log size= 50
> unix extensions= no
> dos charset= ascii
> state directory= /mnt/system/samba/system
> cache directory= /tmp/samba/
> ntlm auth= Yes
> winbind expand groups= 1
> 
> Thanks,

Several things, read 'man smb.conf' and:

https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member

Remove 'passdb backend= smbpasswd', you will then be using the default
'tdbsam' passdb backend.

Rowland



More information about the samba mailing list