| Komodor |
09-11-2012 02:46 AM |
Samba problem
Good morning,
I am writing to ask you to help me with samba problem:
when I run the command: kinit Administrator @ MYDOMAIN
and then check with the klist command, the server returns:
Quote:
Valid starting Expires Service principal
09/11/12 09:00:16 09/11/12 15:40:16 krbtgt/MYDOMAIN.LOCAL@DMYDOMAIN.LOCAL
Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached
|
and so far there are no problems.
But just launch the command: net ads join-U Administrator
the server responds:
Quote:
Administrator's password:
[2012/09/11 09:01:26, 0] utils/net_ads.c:ads_startup_int(286)
ads_connect: No logon servers
Failed to join domain: No logon servers
|
If I launch the same commands after 18:00pm in the evening, everything works:
Quote:
[root@archivio ~]# net ads join -U Administrator
Administrator's password:
Using short domain name -- MYDOMAIN
Joined 'ARCHIVIO' to realm 'MYDOMAIN.LOCAL'
|
But when I come in the morning to work, the server is disconnected from the domain and if I raise the instructions, the server responds with the error posted above.
Please help me to solve this problem?
A month now and I'm looking for the solution ..
Thanks to all ..
I attach my configuration:
Quote:
file /etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
ticket_lifetime = 24000
default_realm = DOMINIO.LOCAL
dns_lookup_realm = true
dns_lookup_kdc = true
[realms]
DOMINIO.LOCAL = {
kdc = server.dominio.local:88
admin_server = server.dominio.local:749
default_domain = dominio.local
}
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[domain_realm]
.dominio.local = DOMINIO.LOCAL
dominio.local = DOMINIO.LOCAL
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
|
Quote:
file /etc/samba/smb.conf
### Global parameters
[global]
workgroup = DOMINIO
realm = DOMINIO.LOCAL
preferred master = no
netbios name = CUBE
server string = CUBE file server
security = ADS
encrypt passwords = yes
hosts allow = 10.0.0. 127.
log level = 3
log file = /var/log/samba/log_%U_%m
max log size = 50
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
idmap uid = 10000-20000
idmap gid = 10000-20000
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_RCVBUF=8192 SO_SNDBUF=8192
### Sharing
[Public]
comment = Public
path = /home/DOMINIO/Public
read only = No
browseable = Yes
writeable = yes
public = yes
create mask = 0660
directory mask = 0770
valid users = @”DOMINIO+domain users”
[homes]
comment = Home
path = /home/DOMINIO/%U
browseable = no
writeable = yes
create mask = 0600
directory mask = 0700
|
Quote:
file /etc/nsswitch.conf
passwd: compat winbind
shadow: compat
group: compat winbind
|
What are the parameters:
Quote:
[libdefaults]
ticket_lifetime = 24000
[appdefaults]
ticket_lifetime = 36000
renew_lifetime = 36000
|
Perhaps it is these that must be configured...
Help me please:( |
