[Samba] mount share using kerberos ticket fails

[Yvan Masson]

Le 10/03/2020 à 11:51, L.P.H. van Belle via samba a écrit :
> 
>> That is what I did. But it fails even when mounting manually:
>> 1. Connect on the desktop using domain user "yvan.masson" (either
>> graphically / TTY / SSH). Kerberos ticket is properly created.
>> 2. Running "sudo mount -t cifs //ad.FOO.BAR.LOCAL/Echange /mnt -o
>> user=yvan.masson,cruid=yvan.masson,sec=krb5" fails with "Required key
>> not available".
> 
> Offcourse, the user is not allowed to mount it. user=yvan.masson <<
> You need to delegate the computer to do it for the user.
> 
> 
>> 3. Running "sudo mount -t cifs //foo-ad.FOO.BAR.LOCAL/Echange /mnt -o
>> user=yvan.masson,cruid=yvan.masson,sec=krb5" works.
> 
> Offcourse, here root is allowed to mount it.
> 
> 
> You know what todo and how to fix it properly.
> 
I did not understand this yet, but I will take time as soon as I can.
> 
> Greetz,
> 
> Louis
> Thanks,
Yvan