We are using a RedHat fedora version 2.6.18-1.2798.fc6 with Samba 3.02476. We are trying to bind the machine to our Windows 2003 Domain.
We have configured smb.conf and krb5.conf correctly (we think)
Running kinit user@DOMAIN gives no errors
kinit tickets gives
kinit(v5): Cannot find KDC for requested realm while getting initial credentials
When I try and join the domain I get
net ads join -U USER
USER's password:
[2007/10/06 18:02:05, 0] utils/net_ads.c:ads_startu
p(289)
ads_connect: Operations error
USER has domain admin privs
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = DOMAIN.LOCAL
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
forwardable = yes
[realms]
DOMAIN.LOCAL = {
kdc = 10.0.10.1
admin_server = 10.0.10.1
default_domain = domain.local
}
[domain_realm]
.domain.local = DOMAIN.LOCAL
domain.local = DOMAIN.LOCAL
[kdc]
profile = /var/kerberos/krb5kdc/kdc.
conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
smb.conf is
[global]
workgroup = DOMAIN
server string = TH-NAS-01
realm = DOMAIN.LOCAL
timestamp logs = yes
dos filetimes = yes
dos filemode = yes
inherit acls = yes
name cache timeout = 0
winbind uid = 20000-600000
winbind gid = 20000-600000
local master = No
guest account = nobody
map to guest = Never
unix charset = CP1252
dos charset = CP850
security = ads
encrypt passwords = Yes
username level = 5
debug level = 0
log level = 0
map acl inherit = yes
load printers = no
printing = bsd
client signing = no
server signing = auto
include = /etc/samba/smb_shares.conf
client use spnego = no
winbind user default domain = yes
[windows]
comment = TH-NAS-01 Windows Share
path = /shares/windows
valid users = @"DOMAIN"\Domain Admins"
writeable = yes
browseable = yes
~
Saw this
http://kbase.redhat.com/faq/FAQ_71_2343.shtm but we don't want to turn off signing and can't understand why this would be required as we have other linux devices (Adaptec Snap Server running Samba) connected to the domain just fine.
