| finitelife |
01-29-2009 04:09 PM |
Active Directory (Slackware[12.2]+Samba[3.2.5]+OpenLDAP[2.3.43]+Kerberos5[1.6.3])
I have a Slackware computer that is having trouble joining the active directory domain. I have reconfigured everything i could think of and I have hit a wall (with my head repeatedly). Here is what I have done so far;
BTW- If i haven't listed it I probably haven't changed it from initial installation. Apply Slackware defaults liberally
Code:
vim /etc/openldap/ldap.conf
BASE dc=noamer, dc=foobar, dc=com
URI ldap://foo-na-rdc01.noamer.foobar.com
wget "http://repository.slacky.eu/slackware-12.0/network/kerberos/1.6.3/krb5-1.6.3-i486-1as.tgz"
installpkg krb5-1.6.3-i486-1as.tgz
cp /etc/krb5.conf.new /etc/krb5.conf
vim /etc/krb5.conf
[libdefaults]
default_realm = NOAMER.FOOBAR.COM
krb4_config = /usr/kerberos/lib/krb.conf
krb4_realms = /usr/kerberos/lib/krb.realms
[realms]
NOAMER.FOOBAR.COM = {
kdc = FOO-NA-RDC01.NOAMER.FOOBAR.COM
admin_server = FOO-NA-RDC01.NOAMER.FOOBAR.COM
default_domain = NOAMER.FOOBAR.COM
}
[domain_realm]
.noamer.foobar.com = NOAMER.FOOBAR.COM
noamer.foobar.com = NOAMER.FOOBAR.COM
[logging]
# kdc = CONSOLE
removepkg samba
wget -r "ftp://carroll.cac.psu.edu/pub/linux/distributions/slackware/slackware-12.2/source/n/samba/"
vim samba.SlackBuild
CFLAGS="$SLKCFLAGS" ./configure \
--enable-cups \
--enable-static=no \
--enable-shared=yes \
--mandir=/usr/man \
--with-fhs \
--with-acl-support=yes \
--with-automount \
--prefix=/usr \
--localstatedir=/var \
--bindir=/usr/bin \
--sbindir=/usr/sbin \
--with-lockdir=/var/cache/samba \
--sysconfdir=/etc \
--with-configdir=/etc/samba \
--with-privatedir=/etc/samba/private \
--with-swatdir=/usr/share/swat \
--with-smbmount \
--with-quotas \
--with-syslog \
--with-utmp \
--with-libsmbclient \
--with-winbind \
--with-ldap \
--with-krb5 \
--with-ads \
--build=$ARCH-slackware-linux
chmod +x samba.SlackBuild
./samba.SlackBuild
installpkg /tmp/samba-3.2.5-i486-1.tgz
chmod +x /etc/rc.d/rc.samba
vim /etc/samba/smb.conf
workgroup = NOAMER
server string = FOO-BETA
security = ads
encrypt passwords = yes
netbios name = FOO-BETA
; load printers = yes
password server = *
realm = NOAMER.FOOBAR.COM
/etc/rc.d/rc.samba start
kinit CNSFOO@NOAMER.FOOBAR.COM
klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: CNSFOO@NOAMER.FOOBAR.COM
Valid starting Expires Service principal
01/29/09 13:28:19 01/29/09 23:28:08 krbtgt/NOAMER.FOOBAR.COM@NOAMER.FOOBAR.COM
renew until 01/30/09 13:28:19
Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached
net ads join -U CNSFOO@NOAMER.FOOBAR.COM
Failed to join domain: Invalid configuration and configuration modification was not requested
I know that CNSFOO has computer join permissions and I have tried adding the computer account manually in AD with similar results. When I changed the values workgroup and default_domain I got this output from net;
Code:
[2009/01/29 16:50:37, 0] libads/kerberos.c:ads_kinit_password(356)
kerberos_kinit_password CNSFOO@NOAMER.FOO.COM@NOAMER.FOO.COM failed: Malformed representation of principal
Failed to join domain: failed to connect to AD: Malformed representation of principal
I am stumped. Two days wasted so far. Any ideas? Information will be made available upon request. |
