[Samba] Kerberos kinit not running

Rowland Penny rpenny at samba.org
Thu Jul 21 08:24:59 UTC 2022


On Wed, 2022-07-20 at 23:18 +0200, Maurizio Caloro via samba wrote:
> root at TestAD:/home/maurizio# samba-tool testparm
> INFO 2022-07-20 22:05:23,177 pid:846 
> /usr/lib/python3/dist-packages/samba/netcmd/testparm.py #96: Loaded
> smb 
> config files from /etc/samba/smb.conf
> INFO 2022-07-20 22:05:23,178 pid:846 
> /usr/lib/python3/dist-packages/samba/netcmd/testparm.py #97: Loaded 
> services file OK.
> Press enter to see a dump of your service definitions
> 
> # Global parameters
> [global]
>          netbios name = TESTAD
>          realm = CALORO.M
>          server role = active directory domain controller
>          server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, 
> drepl, winbindd, ntp_signd, kcc, dnsupdate
>          winbind expand groups = 2
>          workgroup = CALORO
>          idmap_ldb:use rfc2307 = yes
> 
> [sysvol]
>          path = /var/lib/samba/sysvol
>          read only = No
> 
> [netlogon]
>          path = /var/lib/samba/sysvol/testad.caloro.m/scripts

If you run 'hostname -d', does it return 'testad.caloro.m' ?

> 
> --
> 
> root at TestAD:/etc/bind# cat named.conf.options

Try this version:

options {
    directory "/var/cache/bind";

    recursion yes;
    forwarders {
            8.8.8.8;
    };
 
    dnssec-enable no;
    dnssec-validation no;
 
    listen-on { any; };
    notify no;
    auth-nxdomain yes;
    empty-zones-enable no;
    minimal-responses yes;
    // https://wiki.samba.org/index.php/Dns-backend_bind
    tkey-gssapi-keytab "/var/lib/samba/bind-dns/dns.keytab";
};

Rowland





More information about the samba mailing list