[Samba] Failed to find cifs/fs-share at dom.corp (kvno 109) in keytab

Rowland penny rpenny at samba.org
Wed Oct 16 09:26:14 UTC 2019


On 16/10/2019 10:06, banda bassotti wrote:
> Hi Rowland, I refer again after a week, perhaps missing an important 
> piece to the big picture: the error message appears ONLY when you 
> access the share using the netbios alias:
>
> [Global]
>    workgroup = WG1
>    realm = DOM.CORP
>    netbios name = fs-a
>    netbios aliases = oldsamba
>    security = ADS
>
> if you access the \\fs-a\sharename is ok if you access 
> \\oldsamba\sharename  the logs report the absence of the kerberos 
> ticket, to overcome this I have to re-import the oldsamba keytab with 
> ktutil.
>
Do not use netbios aliases, use a CNAME record instead, AD uses DNS 
instead of NetBIOS.

Rowland





More information about the samba mailing list