Hi,
We have been working with samba 3.0.4 and MIT 1.3.6 on SUSE SLES 8 (SP3)
for some time. We use security=ads and our samba is joined to the W2K3
domain.
We use this with winbind to use the authentication from w2k3 instead of
local users (telnet, squid, samba and via smbauth also apache).
When preparing a new server with suse SLES 9 and heimdal 0.6.1 RC3 (suses
package) we started running into trouble. With Samba 3.0.4 everything
works, but with samba 3.0.9, 3.0.10, 3.0.11, i can't get the net ads join
to work. It keeps on saying : segmentation fault. (i didn't find the
courage to check 3.0.5, 3.0.6, 3.0.7 and 3.0.8)
runnig with heimdal 0.6.3 gives the same error.
Compiling samba 3.0.11 with MIT fails in the clitar.c .
The configuration :
krb5.conf :
[libdefaults]
default_realm = MY.DOMAIN
# default_tkt_enctypes = DES-CBC-CRC
# default_tgs_enctypes = DES-CBC-CRC
clockskew = 300
[realms]
JETAIR.BE = {
kdc = tcp/ads.my.domain
kpasswd_server = tcp/ads.my.domain
}
# MY.REALM = {
# kdc = MY.COMPUTER
# admin_server = MY.COMPUTER
# kpasswd_server = MY.COMPUTER
# }
# OTHER.REALM = {
# kdc = OTHER.COMPUTER
# }
[domain_realm]
# .my.domain = MY.REALM
.my.domain = MY.DOMAIN
(changed the real domain to my.domain )
The smb.conf looks like :
[global]
workgroup = MY
realm = MY.DOMAIN
server string = samba server
netbios name = SERVERNAME
interfaces = ip adress
security = ADS
auth methods = winbindd
map to guest = Bad User
password server = *
log level = 3 passdb:5 auth:10 winbind:2
log file = /local/var/samba/logs/log.%m
name resolve order = host wins bcast
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
os level = 2
preferred master = No
local master = No
domain master = No
browse list = No
wins server = ads
ldap ssl = no
idmap uid = 1-2
idmap gid = 1-2
template homedir = /home/rcl_clients
template shell = /bin/sh
winbind use default domain = Yes
map acl inherit = Yes
client use spnego = yes
encrypt passwords = yes
use spnego = yes
Anyone has an idea of what is going wrong?
The suse packages are also samba 3.0.4. I'm only affraid that someday i
won't be able to use my W2K3 domain anymore for authentication.
Q
Attention:
The information contained in this message and or attachments is intended only
for the
person or entity to which it is addressed and may contain confidential and/or
privileged
material. Any review, retransmission, dissemination or other use of, or taking
of any
action in reliance upon this information by persons or entities other than the
intended
recipient is prohibited. If you received this in error, please contact the
sender and
delete the material from any system and destroy any copies.
Jetair, its subsidiaries and/or its employees shall not be liable for the
incorrect or
incomplete transmission of this e-mail or any attachments, nor responsible for
any delay
in receipt.
This e-mail message has been scanned for viruses.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
