LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Slackware (http://www.linuxquestions.org/questions/slackware-14/)
-   -   Active Directory (Slackware[12.2]+Samba[3.2.5]+OpenLDAP[2.3.43]+Kerberos5[1.6.3]) (http://www.linuxquestions.org/questions/slackware-14/active-directory-slackware%5B12-2%5D-samba%5B3-2-5%5D-openldap%5B2-3-43%5D-kerberos5%5B1-6-3%5D-700888/)

finitelife 01-29-2009 04:09 PM

Active Directory (Slackware[12.2]+Samba[3.2.5]+OpenLDAP[2.3.43]+Kerberos5[1.6.3])
 
I have a Slackware computer that is having trouble joining the active directory domain. I have reconfigured everything i could think of and I have hit a wall (with my head repeatedly). Here is what I have done so far;
BTW- If i haven't listed it I probably haven't changed it from initial installation. Apply Slackware defaults liberally
Code:

vim /etc/openldap/ldap.conf
BASE dc=noamer, dc=foobar, dc=com
URI ldap://foo-na-rdc01.noamer.foobar.com

wget "http://repository.slacky.eu/slackware-12.0/network/kerberos/1.6.3/krb5-1.6.3-i486-1as.tgz"
installpkg krb5-1.6.3-i486-1as.tgz
cp /etc/krb5.conf.new /etc/krb5.conf
vim /etc/krb5.conf
[libdefaults]
        default_realm = NOAMER.FOOBAR.COM
        krb4_config = /usr/kerberos/lib/krb.conf
        krb4_realms = /usr/kerberos/lib/krb.realms

[realms]
        NOAMER.FOOBAR.COM = {
                kdc = FOO-NA-RDC01.NOAMER.FOOBAR.COM
                admin_server = FOO-NA-RDC01.NOAMER.FOOBAR.COM
                default_domain = NOAMER.FOOBAR.COM
        }

[domain_realm]
        .noamer.foobar.com = NOAMER.FOOBAR.COM
        noamer.foobar.com = NOAMER.FOOBAR.COM

[logging]
#        kdc = CONSOLE

removepkg samba
wget -r "ftp://carroll.cac.psu.edu/pub/linux/distributions/slackware/slackware-12.2/source/n/samba/"
vim samba.SlackBuild

CFLAGS="$SLKCFLAGS" ./configure \
  --enable-cups \
  --enable-static=no \
  --enable-shared=yes \
  --mandir=/usr/man \
  --with-fhs \
  --with-acl-support=yes \
  --with-automount \
  --prefix=/usr \
  --localstatedir=/var \
  --bindir=/usr/bin \
  --sbindir=/usr/sbin \
  --with-lockdir=/var/cache/samba \
  --sysconfdir=/etc \
  --with-configdir=/etc/samba \
  --with-privatedir=/etc/samba/private \
  --with-swatdir=/usr/share/swat \
  --with-smbmount \
  --with-quotas \
  --with-syslog \
  --with-utmp \
  --with-libsmbclient \
  --with-winbind \
  --with-ldap \
  --with-krb5 \
  --with-ads \
  --build=$ARCH-slackware-linux

chmod +x samba.SlackBuild
./samba.SlackBuild
installpkg /tmp/samba-3.2.5-i486-1.tgz
chmod +x /etc/rc.d/rc.samba
vim /etc/samba/smb.conf
  workgroup = NOAMER
  server string = FOO-BETA
  security = ads
  encrypt passwords = yes
  netbios name = FOO-BETA
;  load printers = yes
  password server = *
  realm = NOAMER.FOOBAR.COM

/etc/rc.d/rc.samba start
kinit CNSFOO@NOAMER.FOOBAR.COM
klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: CNSFOO@NOAMER.FOOBAR.COM

Valid starting    Expires            Service principal
01/29/09 13:28:19  01/29/09 23:28:08  krbtgt/NOAMER.FOOBAR.COM@NOAMER.FOOBAR.COM
        renew until 01/30/09 13:28:19


Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached

net ads join -U CNSFOO@NOAMER.FOOBAR.COM
Failed to join domain: Invalid configuration and configuration modification was not requested

I know that CNSFOO has computer join permissions and I have tried adding the computer account manually in AD with similar results. When I changed the values workgroup and default_domain I got this output from net;

Code:

[2009/01/29 16:50:37,  0] libads/kerberos.c:ads_kinit_password(356)
  kerberos_kinit_password CNSFOO@NOAMER.FOO.COM@NOAMER.FOO.COM failed: Malformed representation of principal
Failed to join domain: failed to connect to AD: Malformed representation of principal

I am stumped. Two days wasted so far. Any ideas? Information will be made available upon request.

Didier Spaier 01-29-2009 05:21 PM

May be nothing related to your problem, just wondering...
- Why did you take the package krb5-1.6.3-i486-1as.tgz from Slacky.eu 12.0 repository instead of krb5-1.6.3-i486-2as.tgz from 12.2 repository . They are not the same, so this *could* cause problems.
- Why did you replace samba-3.2.7 shipped with Slackware by samba-3.2.5 ?

finitelife 06-15-2009 10:14 AM

Just to revisit this- I have applied the suggested changes with the exact same results. It has been a few months. Any fresh ideas? The I have already Googled/RTM. Still stuck.

DragonM15 12-16-2011 06:28 PM

Sorry for bringing up an old post. I also know that slackware 12.2 has been around for a while. That aside, did you figure out your issue?

Thanks,
DragonM15


All times are GMT -5. The time now is 05:53 PM.