[Samba] SAMBA 4.7.4 with MIT Keberos

Micha Ballmann ballmann at uni-landau.de
Mon Jan 22 20:04:22 UTC 2018


Hello,

i installed a SAMBA 4.7.4 AD Server on Ubuntu 18.04 (BETA). SAMBA4 was 
compiled from source. For MIT Keberos i also installed libkrb5-dev and 
krb5-kdc and compiled with the "--with-system-mitkrb5" option.

The installation runs pretty good (some dependencies problem, solved 
manually). But now im not able to test kerberos:

# kinit administrator

--> kinit: Cannot find KDC for realm "ROOTRUDI.DE" while getting initial 
credentials.

I followed all steps from samba.org:

- 
https://wiki.samba.org/index.php/Running_a_Samba_AD_DC_with_MIT_Kerberos_KDC

- 
https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller 
--> hanging on "Verifying Kerberos"


# vim /usr/local/samba/private/kdc.conf
-------------------------------------------------
[kdcdefaults]
         kdc_ports = 88
         kdc_tcp_ports = 88
         kadmind_port = 464

[realms]
         ROOTRUDI.DE = {
         }

         rootrudi.de = {
         }

         ROOTRUDI = {
         }

[dbmodules]
         db_module_dir = /usr/local/samba/lib/krb5/plugins/kdb

         ROOTRUDI.DE = {
                 db_library = samba
         }

         rootrudi.de = {
                 db_library = samba
         }

         ROOTRUDI = {
                 db_library = samba
         }

[logging]
         kdc = FILE:/usr/local/samba/var/mit_kdc.log
         admin_server = FILE:/usr/local/samba/var/mit_kadmin.log
-------------------------------------------------

# vim /etc/krb5.conf
-------------------------------------------------
[libdefaults]
         default_realm = ROOTRUDI.DE
         dns_lookup_realm = false
         dns_lookup_kdc = true
-------------------------------------------------

What does it mean in 
https://wiki.samba.org/index.php/Running_a_Samba_AD_DC_with_MIT_Kerberos_KDC:

"Do not start the krb5kdc" manually"

Best regards
Micha










More information about the samba mailing list