LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 11-26-2014, 02:32 AM   #1
Arvind.chaturvedi88
LQ Newbie
 
Registered: Oct 2010
Posts: 1

Rep: Reputation: 0
how to configure krb5p samba with IPA principal


Hello,
I'm trying to configure samba server and client with IPA principal keytab.

I tried all the way, but still not working.

Error:- mount error(126): Required key not available

However if i run klist -tk, principal added and listed.

klist -tk | grep -i cifs
5 11/25/2014 10:28:56 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
5 11/25/2014 10:28:56 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
5 11/25/2014 10:28:56 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
5 11/25/2014 10:28:56 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
5 11/25/2014 10:28:56 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
5 11/25/2014 10:28:56 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
6 11/25/2014 11:03:28 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
6 11/25/2014 11:03:28 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
6 11/25/2014 11:03:28 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
6 11/25/2014 11:03:28 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
6 11/25/2014 11:03:28 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA
6 11/25/2014 11:03:28 cifs/nlxcis007.dev.smt.infra@DEV.SMT.INFRA

Samba server configuration:-

server role = member server
realm = DEV.SMT.INFRA
encrypt passwords = yes
kerberos method = secrets and keytab
password server = nlsmtdevms052.dev.smt.infra

Krb5.conf:-

#File modified by ipa-client-install

includedir /var/lib/sss/pubconf/krb5.include.d/

[libdefaults]
default_realm = DEV.SMT.INFRA
dns_lookup_realm = false
dns_lookup_kdc = false
rdns = false
ticket_lifetime = 9999h
forwardable = yes
default_ccache_name = KEYRINGersistent:%{uid}

[realms]
DEV.SMT.INFRA = {
kdc = nlsmtdevms052.dev.smt.infra:88
master_kdc = nlsmtdevms052.dev.smt.infra:88
admin_server = nlsmtdevms052.dev.smt.infra:749
default_domain = dev.smt.infra
pkinit_anchors = FILE:/etc/ipa/ca.crt
}

[domain_realm]
.dev.smt.infra = DEV.SMT.INFRA
dev.smt.infra = DEV.SMT.INFRA


Can anyone help, all machine are up and running with RHEL-7.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
NFS 4 with kerberos mount by principal linuxmonster Linux - Security 2 04-20-2014 08:07 PM
[SOLVED] Unable to configure ipa-client in RHEL6 environment pix9 Linux - Server 1 03-08-2013 02:13 AM
[SOLVED] SAMBA problem â?? rebuilding server â?? How to configure SAMBA share with writing - Win Alvin88 Linux - Newbie 5 04-04-2012 12:51 AM
[SOLVED] Wrong principal in request (Kerberos/GSSAPI/ssh/Debian) Toomas Linux - Server 1 01-04-2012 06:30 AM
LDAP bind trouble via Kerb/SASL/GSSAPI- principal name mangled riemann_noodles Linux - Server 0 07-09-2008 01:08 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 09:50 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration