rat: samba-3.0.12,1 + DC 2003 не подружить

1 сообщение / 0 new
Гость
rat: samba-3.0.12,1 + DC 2003 не подружить

Добрый день
уткнулся в проблему сабжа, после того как благополучно произвел то же самое на 2000

Итак,
FreeBSD 5.2.1-RELEASE :D
samba-3.0.12,1
DC 2003

С керберосом вроде все нормально
[root@FreeBSD log]# kinit administrator
administrator@TPEP.LOCAL's Password:
[root@FreeBSD log]#

[root@FreeBSD log]# klist
Credentials cache: FILE:/tmp/krb5cc_0
Principal: administrator@TPEP.LOCAL

Issued Expires Principal
Apr 14 14:04:06 Apr 14 20:47:13 krbtgt/TPEP.LOCAL@TPEP.LOCAL
[root@FreeBSD log]#

Начинал с krb5.conf следующего содержания

[libdefaults]
default_realm = TPEP.LOCAL
[realms]
TPEP.LOCAL = {
kdc = server.tpep.local
}
(последующие изменения результат получения тикета не изменили, т.е. тикет я получать могу)

[root@FreeBSD log]# net ads info -U administrator
LDAP server: 192.168.15.1
LDAP server name: server
Realm: TPEP.LOCAL
Bind Path: dc=TPEP,dc=LOCAL
LDAP port: 389
Server time: Thu, 14 Apr 2005 14:07:11 GMT
KDC server: 192.168.15.1
Server time offset: -185
[root@FreeBSD log]#

А теперь интересное

[root@FreeBSD log]# net ads join -U administrator
administrator's password:
Segmentation fault (core dumped)
[root@FreeBSD log]#

net ads join -d 10 -U administrator
........
<откусано>
[2005/04/14 14:11:33, 4] libads/sasl.c:ads_sasl_bind(447)
Found SASL mechanism GSS-SPNEGO
[2005/04/14 14:11:33, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2
[2005/04/14 14:11:33, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2
[2005/04/14 14:11:33, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3
[2005/04/14 14:11:33, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10
[2005/04/14 14:11:33, 3] libads/sasl.c:ads_sasl_spnego_bind(211)
ads_sasl_spnego_bind: got server principal name =server$@TPEP.LOCAL
[2005/04/14 14:11:33, 3] libsmb/clikrb5.c:ads_krb5_mk_req(381)
ads_krb5_mk_req: krb5_cc_get_principal failed (No such file or directory)
Segmentation fault (core dumped)
[root@FreeBSD log]#

Ну и на всякий
[root@FreeBSD log]# cat /usr/local/etc/smb.conf
[global]
workgroup = TPEP
realm = TPEP.LOCAL
netbios name = FreeBSD
server string = Samba Server
security = DOMAIN
encrypt passwords = yes
hosts allow = 192.168.15.0/24 127.
interfaces = rl0 lo0
log file = /var/log/samba/log.%m
max log size = 50
guest account = pcguest
socket options = TCP_NODELAY
dos charset = 866
unix charset = koi8-r
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind separator = +
winbind use default domain = Yes
password server = server
client use spnego = yes

[public]
<откусано>

RSS-материал