Столкнулся с распространенным затыком при вводе самбы (smb) на Centos в домен Win2k3 (pdc). Вчера перестала пускать народ на шары. Перезавожу машину в домен, получаюUsing short domain name -- XX
Failed to set servicePrincipalNames. Please ensure that
the DNS domain of this server matches the AD domain,
Or rejoin with using Domain Admin credentials.
Deleted account for 'SMB' in realm 'XX.YY.COM'
Failed to join domain: Type or value exists
в отладке name_to_fqdn: lookup for SMB failed
Конфиги:
/etc/samba/smb.conf
workgroup = XX
netbios name = SMB
server string =
security = ads
encrypt passwords = yes
realm = XX.YY.COM
password server = pdc.xx
idmap uid = 100000-200000
idmap gid = 100000-200000
winbind enum users = yes
winbind enum groups = yes
winbind separator = \\
load printers = no
printcap name = /etc/printcap
printing =
log file = /var/log/samba/%m.log
max log size = 50
acl compatibility = auto
inherit owner = yes
inherit acls = yes
#inherit permissions = yes
create mask = 770
map acl inherit = yes
nt acl support = yes
os level = 10
oplocks = yes
winbind use default domain = yes
admin users = %D\admin
#debug level = 10
/etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = XX.YY.COM
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
forwardable = yes
[realms]
XX.YY.COM = {
kdc = pdc.xx.yy.com:88
admin_server = pdc.xx.yy.com:749
default_domain = xx.yy.com
}
[domain_realm]
.xx.yy.com = XX.YY.COM
xx.yy.com = XX.YY.COM
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
в /etc/nsswitch.conf
passwd: files winbind
shadow: files winbind
group: files winbind
hosts: files dns
/etc/hosts
127.0.0.1 localhost.localdomain localhost
192.168.1.8 smb.xx.yy.com smb
192.168.1.6 pdc.xx.yy.com pdc
hostname
SMB
/etc/resolv.conf
nameserver 192.168.1.6
nslookup smb.xx.yy.com успешно резолвится в IP
Куда смотреть?...
