Web lists-archives.com

[Samba] SAMBA 4.7.4 with MIT Keberos




Hello,

i installed a SAMBA 4.7.4 AD Server on Ubuntu 18.04 (BETA). SAMBA4 was compiled from source. For MIT Keberos i also installed libkrb5-dev and krb5-kdc and compiled with the "--with-system-mitkrb5" option.

The installation runs pretty good (some dependencies problem, solved manually). But now im not able to test kerberos:

# kinit administrator

--> kinit: Cannot find KDC for realm "ROOTRUDI.DE" while getting initial credentials.

I followed all steps from samba.org:

- https://wiki.samba.org/index.php/Running_a_Samba_AD_DC_with_MIT_Kerberos_KDC

- https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller --> hanging on "Verifying Kerberos"


# vim /usr/local/samba/private/kdc.conf
-------------------------------------------------
[kdcdefaults]
        kdc_ports = 88
        kdc_tcp_ports = 88
        kadmind_port = 464

[realms]
        ROOTRUDI.DE = {
        }

        rootrudi.de = {
        }

        ROOTRUDI = {
        }

[dbmodules]
        db_module_dir = /usr/local/samba/lib/krb5/plugins/kdb

        ROOTRUDI.DE = {
                db_library = samba
        }

        rootrudi.de = {
                db_library = samba
        }

        ROOTRUDI = {
                db_library = samba
        }

[logging]
        kdc = FILE:/usr/local/samba/var/mit_kdc.log
        admin_server = FILE:/usr/local/samba/var/mit_kadmin.log
-------------------------------------------------

# vim /etc/krb5.conf
-------------------------------------------------
[libdefaults]
        default_realm = ROOTRUDI.DE
        dns_lookup_realm = false
        dns_lookup_kdc = true
-------------------------------------------------

What does it mean in https://wiki.samba.org/index.php/Running_a_Samba_AD_DC_with_MIT_Kerberos_KDC:

"Do not start the krb5kdc" manually"

Best regards
Micha








--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba