Hello,
I'm trying to configure samba server and client with IPA principal keytab.
I tried all the way, but still not working.
Error:- mount error(126): Required key not available
However if i run klist -tk, principal added and listed.
klist -tk | grep -i cifs
5 11/25/2014 10:28:56 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
5 11/25/2014 10:28:56 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
5 11/25/2014 10:28:56 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
5 11/25/2014 10:28:56 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
5 11/25/2014 10:28:56 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
5 11/25/2014 10:28:56 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
6 11/25/2014 11:03:28 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
6 11/25/2014 11:03:28 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
6 11/25/2014 11:03:28 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
6 11/25/2014 11:03:28 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
6 11/25/2014 11:03:28 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
6 11/25/2014 11:03:28 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
Samba server configuration:-
server role = member server
realm = DEV.SMT.INFRA
encrypt passwords = yes
kerberos method = secrets and keytab
password server = nlsmtdevms052.dev.smt.infra
Krb5.conf:-
#File modified by ipa-client-install
includedir /var/lib/sss/pubconf/krb5.include.d/
[libdefaults]
default_realm = DEV.SMT.INFRA
dns_lookup_realm = false
dns_lookup_kdc = false
rdns = false
ticket_lifetime = 9999h
forwardable = yes
default_ccache_name = KEYRING
ersistent:%{uid}
[realms]
DEV.SMT.INFRA = {
kdc = nlsmtdevms052.dev.smt.infra:88
master_kdc = nlsmtdevms052.dev.smt.infra:88
admin_server = nlsmtdevms052.dev.smt.infra:749
default_domain = dev.smt.infra
pkinit_anchors = FILE:/etc/ipa/ca.crt
}
[domain_realm]
.dev.smt.infra = DEV.SMT.INFRA
dev.smt.infra = DEV.SMT.INFRA
Can anyone help, all machine are up and running with RHEL-7.