Samba et ADS

[benroussel]

Bonjour,

Ca fait 3 jours que j'essaie de trouver une solution correcte sur internet mais rien ne veut marcher. Pourtant a priori ce que je desire faire est plutot faisable : faire reconnaitre mon serveur linux sous active directory afin d'en faire un partage d'imprimantes.

A l'aide de la commande net ads join -UAdministrateur%password, j'arrive a joindre le domaine active directory (Joined "svlinux" to realm "TPND.FR") mais je suis incapable de m'authentifier avec kerberos : get_service_ticket: kerberos_kinit_password SVlINUX$@TPND.FR@TPND.FR failed : Preauthentification failed

Voici mes fichiers smb.conf, krb5.conf et nsswitch.conf dans leurs grandes lignes:

krb5.conf

[logging]
default = FILE:/var/log/kerberos/krb5libs.log
kdc = FILE:/var/log/kerberos/krb5kdc.log
admin_server = FILE:/var/log/kerberos/kadmind.log

[libdefaults]
ticket_lifetime = 24000
default_realm = TPND.FR
default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc
default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc
permitted_enctypes = des3-hmac-sha1 des-cbc-crc
dns_lookup_realm = false
dns_lookup_kdc = false
kdc_req_checksum_type = 2
checksum_type = 2
ccache_type = 1
forwardable = true
proxiable = true

[realms]
EXAMPLE.COM = {
kdc = kerberos.example.com:88
admin_server = kerberos.example.com:749
default_domain = example.com
}

TPND.FR = {
kdc = sv02.tpnd.fr:88
admin_server = sv02.tpnd.fr:749
default_domain = tpnd.fr
}

[domain_realm]
.example.com = EXAMPLE.COM
.tpnd.fr = TPND.FR
tpnd.fr = TPND.FR

[kdcdefaults]
kdc_ports = 88,750

[kdc]
profile = /etc/kerberos/krb5kdc/kdc.conf

[pam]
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false

[login]
krb4_convert = false
krb4_get_tickets = false

A NOTER QUE le fichier kdc.conf n'existe nul part (est normal?)

/etc/nsswitch.conf


passwd: files ldap
shadow: files ldap
group: files ldap

hosts: files dns wins
bootparams: files

ethers: files
netmasks: files
networks: files dns
protocols: files
rpc: files
services: files

netgroup: files

publickey: files

automount: files
aliases: files


smb.conf
[global]

workgroup = TPND
realm = TPND.FR
server string = Samba Server %v
log file = /var/log/samba/%m.log
max log size = 50
log level = 1
syslog = 0
map to guest = bad user
security = ADSencrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
username map = /etc/samba/smbusers
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind separator = +
template primary group = TPND
template shell = /bin/bash
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
ldap ssl = no

[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
read only = No



Voila, vous voyez qque chose qui pourrait clocher? D'avance merci parce que la je sais plus trop quoi faire!!!

Benoit

[toinekikil]

Utilise le très bon utilitaire sadms sur http://sadms.sourceforge.net/

Enjoy