[Bug 236830] Re: cifs does not support kerberos authentication

[wzzrd]

Hi Steve,

I had downloaded the source tarball from Samba.org at home and I'm not
able to download the source deb from Intrepid at work, so I built Samba
3.2.0 from source and created a deb with checkinstall. Quick & dirty.

After pulling in the correct -dev packages, I configured with:

./configure --enable-cups --with-ads --with-cifsmount --with-ldap
--enable-fam --with-cifsspnego --with-dnsupdate --with-automount --with-
winbind --with-krb5

I installed the new version of samba in /usr/local/samba and installed
the kernel from -proposed.

I followed your instructions above (the request-key.conf stuff) and I am
now able to mount a cifs share on my machine. So the kernel patch works,
that's for sure; at least for a Kerberos cache generated during Likewise
login (I use Likewise Open).

What does surprise me a bit is the fact that if I klist, I can see my
TGT and, directly after mount, the host ticket from the fileserver.
After a while though, the latter disappears, even though I still have
the cifs share mounted and accessible. Maybe that has something to do
with Likewise; I'm more used to using pam_krb5, which does not purge
tickets this soon.

Apart from that, I can only mount the cifs share with sec=krb, not with
sec=krb5i. During debugging this, I found that cifs.spnego segfaults
horribly when started on it's own. As said, mounting seems to work
though. I'll try downloading the Intrepid samba source deb at home
tonight, maybe you guys have applied some patches on it?

-- 
cifs does not support kerberos authentication
https://bugs.launchpad.net/bugs/236830
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.