LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 11-08-2010, 02:44 AM   #1
tquang
Member
 
Registered: Jul 2010
Posts: 44

Rep: Reputation: 0
Windows (Active Directory), Linux (BIND and SAMBA)


Hi eveybody!

I'm building system network with integrate betweens Windows and Linux, but I have problem for this when deploy. Above my config for each server:

Linux [smb.quangvps.local]:
_installed BIND and SAMBA

Windows [upgraded to dc.quangvps.local]:
_install AD with DNS using BIND (well done connecting to Linux).

However, problem occur in progress integrate SAMBA. Because Kerberos not found Windows AD, command/output
Code:
[root@smb ~]# kinit Administrator@QUANGVPS.LOCAL
kinit(v5): Cannot find KDC for requested realm while getting initial credentials
And, i tried with
Code:
[root@smb ~]# kinit Administrator@DC.QUANGVPS.LOCAL
kinit(v5): Cannot find KDC for requested realm while getting initial credentials
Yes, I known just edit BIND config, but really I don't know how can config exactly?

Because if "Windows AD" run by himself, it very easy.

Thank you.

=====

Post script:

Kerberos config
Code:
[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 default_realm = QUANGVPS.LOCAL
 dns_lookup_realm = false
 dns_lookup_kdc = false
 ticket_lifetime = 24h
 forwardable = yes

[realms]
 QUANGVPS.LOCAL = {
  kdc = dc.quangvps.local
  admin_server = dc.quangvps.local
  default_domain = quangvps.local
 }

[domain_realm]
 .quangvps.local = QUANGVPS.LOCAL
 quangvps.local = QUANGVPS.LOCAL

[appdefaults]
 pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false
 }

Last edited by tquang; 11-08-2010 at 02:46 AM.
 
Old 11-08-2010, 05:10 PM   #2
d072330
Member
 
Registered: Nov 2007
Location: USA
Distribution: CentOS 5/6
Posts: 186

Rep: Reputation: 6
From my working config

Try this. This is from my working configuration.

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
default_realm = DIR.EXAMPLE.COM
dns_lookup_realm = true
dns_lookup_kdc = true
ticket_lifetime = 24h
forwardable = yes

[realms]
DIR.EXAMPLE.COM = {
kdc = AD_Server_FQDN:88 # Kerberos—authentication system (port 88)
kdc = AD_Server_FQDN:88
kdc = AD_Server_FQDN:88
admin_server = AD_Server_FQDN:749 # Kerberos (protocol) administration (port 749)
}

[domain_realm]
dir.example.com = DIR.EXAMPLE.COM
.dir.example.com = DIR.EXAMPLE.COM

[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
 
Old 11-15-2010, 12:42 AM   #3
tquang
Member
 
Registered: Jul 2010
Posts: 44

Original Poster
Rep: Reputation: 0
Thank d072330 replied.

I re-build with 3 server: 1DC - 1DNS - 1SMB

It's ok.
 
Old 11-15-2010, 01:55 AM   #4
ganesh24pal@gmail.com
Member
 
Registered: Jun 2010
Location: Mumbai, India
Distribution: CentOS , Fedora, Open Suse
Posts: 193
Blog Entries: 5

Rep: Reputation: 3
Hi,
Have good day.
Also create Additional Domain controller. It will help you.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
HOWTO: MS Active Directory with BIND on Linux ghight Linux - Networking 12 10-27-2012 04:58 AM
join samba server with windows active directory suchit007 Linux - Newbie 1 05-27-2009 10:57 AM
SAMBA on a Windows Active Directory xKintaro Linux - Networking 7 12-20-2008 10:22 PM
SAMBA, WINBIND and KERBEROS against Windows 2000 Active Directory mago Linux - Networking 2 07-28-2006 11:52 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 08:45 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration