здравстуйте, Поставил самбу на debian samba 2:3.2.5-4lenny7
Вот конфигsmb.conf
[global]
workgroup = DUNCAN
password server = server
encrypt passwords = yes
realm = DUNCAN.MACLEOD
netbios name = shareserver
winbind use default domain = Yes
server string = %h server
log file = /var/log/samba/log.%m
max log size = 1000
syslog only = no
syslog = 0
panic action = /usr/share/samba/panic-action %d
security = ads
encrypt passwords = true
obey pam restrictions = yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
idmap uid = 10000-20000
idmap gid = 10000-20000
[homes]
comment = Home Directories
browseable = yes
read only = yes
create mask = 0700
directory mask = 0700
valid users = %S
krb5.conf
[libdefaults]
default_realm = DUNCAN.MACLEOD
krb4_config = /etc/krb.conf
krb4_realms = /etc/krb.realms
kdc_timesync = 1
ccache_type = 4
forwardable = true
proxiable = true
v4_instance_resolve = false
v4_name_convert = {
host = {
rcmd = host
ftp = ftp
}
plain = {
something = something-else
}
}
fcc-mit-ticketflags = true
[realms]
DUNCAN.MACLEOD = {
kdc = server.duncan.macleod
kdc = serverkd.duncan.macleod
admin_server = server.duncan.macleod
}
[domain_realm]
duncan.macleod = DUNCAN.MACLEOD
[login]
krb4_convert = true
krb4_get_tickets = false
Проблема в том что не могу войти в домен командой
shareserv:/etc# net ads join -Ucomp
Выдает
Enter comp's password:
Using short domain name -- DUNCAN
Joined 'SHARESERVER' to realm 'duncan.macleod'
[2009/10/20 17:37:43, 0] libads/kerberos.c:ads_kinit_password(356)
kerberos_kinit_password SHARESERVER$@DUNCAN.MACLEOD failed: Preauthentication failed
No DNS domain configured for shareserver. Unable to perform DNS Update.
DNS update failed!
Если выполнить
shareserv:/etc# klist
Имеем
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: comp@DUNCAN.MACLEOD
Valid starting Expires Service principal
10/20/09 17:36:54 10/21/09 03:36:56 krbtgt/DUNCAN.MACLEOD@DUNCAN.MACLEOD
renew until 10/21/09 17:36:54
Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached
и соответственно не видит пользователей домена вывоводом команды
wbinfo -u
выдает только локальных пользователей линукс.
Подскажите пожалуйста как быть ?
