Thanks Jim for you reply. When I said Kerberos packed is 1.2.27 default redhat9 included, I mind what I use krb5-libs-1.2.27-10 from Redhat9. As you can see I am a Linux beginner guy. I have changed the Registry in my w2k3 DC as you tell me down without any success ( I have create other ticket with "ktpass" tool and it was apply to Samba server) The other way for try solve the problem is : Update Kerberos in Redhat9 ( Samba server) is possible to use an rpm packed from web, or I must recompile the kernel including this Kerberos packed, in this case which Kerberos packed I must use, and which could the correct procedure for update ( I remember to you I am a Linux beginner and never I have compile nothing). Thanks in advanced for you help
Saludos / Best Regards Pedro ________________________________ From: Jim McDonough [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 14, 2004 3:23 PM To: Duran Munoz, Pedro Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Samba] Samba 3.0.2a and ADS w2k3 Kerberos authentication problem >I am using Samba 3.0.2a as Domain member into ADS w2k3 domain. net ads >join -U administrator work fine. >wbinfo -u and -g works fine. >I am able to mapped Samba shares with IP address (\\192.168.0.x\share) >but it does not works if I use netbios name ( \\redhat9\share) the >system asks me for authentication but never I get into the Samba server >( Login and password are invalid ). >Kerberos packed is 1.2.27 default redhat9 included. Well, when I read this last line, I assumed that you've just run into the w2k3 doesn't deal with non-rc4-hmac kerberos (that would be pre-1.3 MIT kerberos), but it is strange that you can map via IP address... There are several things to try here: -upgrade kerberos to post 1.3 -try fixing windows, which has multiple options. See http://support.microsoft.com/default.aspx?scid=kb;en-us;833708 But the fact that it works via IP address puzzles me... ---------------------------- Jim McDonough IBM Linux Technology Center Samba Team 6 Minuteman Drive Scarborough, ME 04074 USA [EMAIL PROTECTED] [EMAIL PROTECTED] Phone: (207) 885-5565 IBM tie-line: 776-9984 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba