Web lists-archives.com

[Samba] Winbind with krb5auth for trust users


I'm having trouble realizing a krb5auth with pam_winbind with trusted domain users (external trust) on our clients. The client is joined to a local domain, which has a "external trust" to a global domain.

The following things are working for all users (local and trusted domain):

"wbinfo -i"
"wbinfo --pam-logon"
"wbinfo -a"

Just "wbinfo -K" works only for local domain users. And that is the problem. I need the Kerberos ticket for NFS.

smb.conf, krb5.conf and the other configs are taken from https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member. Just changed the domain/realm name to the local domain name.


To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba