Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 4 Apr 2017 22:02:45 +0000
From:      Doug Sampson <dougs@dawnsign.com>
To:        "freebsd-ports@freebsd.org" <freebsd-ports@freebsd.org>
Subject:   net/samba46
Message-ID:  <8c7c77cdd530414381326359af7bdb82@dawnsign.com>

next in thread | raw e-mail | index | archive | help
Hello,

When I try to join a domain after building samba46, I get this error messag=
e:

root@aries:/usr/local/etc # net ads join -U dspadmin%<password>
Failed to join domain: failed to create kerberos keytab
root@aries:/usr/local/etc #


I cannot find anything in any of the samba4 logs.

root@aries:/usr/ports/net/samba46 # make showconfig
=3D=3D=3D> The following configuration options are available for samba46-4.=
6.1_2:
     ADS=3Don: Active Directory client support(implies LDAP)
     AD_DC=3Don: Active Directory Domain Controller support
     CUPS=3Doff: CUPS printing system support
     DEBUG=3Don: Build with debugging support
     DEVELOPER=3Doff: With development support(implies NTVFS)
     DOCS=3Don: Build and/or install documentation
     EXP_MODULES=3Doff: Experimental modules(WANT_EXP_MODULES)
     FAM=3Don: File Alteration Monitor support
     LDAP=3Don: LDAP client support
     MANPAGES=3Doff: Build manpages from DOCBOOK templates
     NTVFS=3Doff: Build *DEPRECATED* NTVFS file server
     QUOTAS=3Don: Disk quota support
     SYSLOG=3Don: Syslog logging support
     UTMP=3Don: UTMP accounting support
=3D=3D=3D=3D> Options available for the radio DNS: you can only select none=
 or one of them
     NSUPDATE=3Doff: Use samba NSUPDATE utility for AD DC
     BIND99=3Doff: Use Bind 9.9 as AD DC DNS server frontend
     BIND910=3Doff: Use Bind 9.10 as AD DC DNS server frontend
     BIND911=3Doff: Use Bind 9.11 as AD DC DNS server frontend
=3D=3D=3D=3D> Options available for the radio ZEROCONF: you can only select=
 none or one of them
     AVAHI=3Doff: Zeroconf support via Avahi
     MDNSRESPONDER=3Doff: Zeroconf support via mDNSResponder
=3D=3D=3D> Use 'make config' to modify these settings

Testparm reveals the following:

[global]
        realm =3D DOMAIN.TLD
        server string =3D=20
        workgroup =3D DOMAIN
        domain master =3D No
        local master =3D No
        preferred master =3D No
        client ldap sasl wrapping =3D seal
        log file =3D /var/log/samba4/log.%m
        disable spoolss =3D Yes
        load printers =3D No
        printcap name =3D /dev/null
        disable netbios =3D Yes
        max xmit =3D 65535
        min receivefile size =3D 16384
        name resolve order =3D lmhosts hosts bcast
        smb ports =3D 445
        kerberos method =3D system keytab
        security =3D ADS
        server signing =3D if_required
        deadtime =3D 15
        max open files =3D 65535
        socket options =3D TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
        template shell =3D /bin/bash
        winbind cache time =3D 10
        winbind enum groups =3D Yes
        winbind enum users =3D Yes
        winbind nss info =3D rfc2307
        winbind offline logon =3D Yes
        winbind refresh tickets =3D Yes
        winbind separator =3D -
        nfs4:chown =3D yes
        nfs4:acedup =3D merge
        nfs4:mode =3D special
        idmap config *:range =3D 1000-50000
        idmap config dsp:backend =3D rid
        idmap config dsp:default =3D yes
        idmap config dsp:range =3D 50001-60000
        idmap config * : backend =3D tdb
        map readonly =3D no
        store dos attributes =3D Yes
        strict locking =3D No
        directory name cache size =3D 0
        map acl inherit =3D Yes
        admin users =3D DOMAIN-doug
        hosts allow =3D 192.168.xxx. 192.168.xxx. 127. 10.8.
        inherit owner =3D Yes
        inherit permissions =3D Yes
        read only =3D No
        aio read size =3D 16384
        aio write size =3D 16384
        max connections =3D 65535
        use sendfile =3D Yes
        vfs objects =3D zfsacl acl_xattr audit netatalk

Using the same make configure options and the same smb4.conf on net/samba45=
 allows me to join a domain successfully.

~Doug



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8c7c77cdd530414381326359af7bdb82>