[Samba] mount share using kerberos ticket fails
yvan at masson-informatique.fr
Tue Mar 10 11:40:17 UTC 2020
Le 10/03/2020 à 11:51, L.P.H. van Belle via samba a écrit :
>> That is what I did. But it fails even when mounting manually:
>> 1. Connect on the desktop using domain user "yvan.masson" (either
>> graphically / TTY / SSH). Kerberos ticket is properly created.
>> 2. Running "sudo mount -t cifs //ad.FOO.BAR.LOCAL/Echange /mnt -o
>> user=yvan.masson,cruid=yvan.masson,sec=krb5" fails with "Required key
>> not available".
> Offcourse, the user is not allowed to mount it. user=yvan.masson <<
> You need to delegate the computer to do it for the user.
>> 3. Running "sudo mount -t cifs //foo-ad.FOO.BAR.LOCAL/Echange /mnt -o
>> user=yvan.masson,cruid=yvan.masson,sec=krb5" works.
> Offcourse, here root is allowed to mount it.
> You know what todo and how to fix it properly.
I did not understand this yet, but I will take time as soon as I can.
More information about the samba