> There's a line missing from your krb5.conf. Add the
> extra [domain_realm] line as shown below.
r...@famsol01:~# cat /etc/resolv.conf
search fam.local
domain fam.local
nameserver 192.168.10.20
nameserver 192.10.10.32
r...@famsol01:~# mcedit /etc/krb5/krb5.conf
r...@famsol01:~# cat /etc/krb5/krb5.conf
#
# ident "%Z%%M% %I% %E% SMI"
#
# krb5.conf template
# In order to complete this configuration file
# you will need to replace the __<name>__ placeholders
# with appropriate values for your network and uncomment the
# appropriate entries.
#
[libdefaults]
default_realm = FAM.LOCAL
[realms]
FAM.LOCAL = {
kdc = famdc01.fam.local
admin_server = famdc01.fam.local
kpasswd_server = famdc01.fam.local
kpasswd_protocol = SET_CHANGE
}
[domain_realm]
famdc01.fam.local = FAM.LOCAL
.fam.local = FAM.LOCAL
r...@famsol01:~# smbadm join -u Administrator fam.local
After joining fam.local the smb service will be restarted automatically.
Would you like to continue? [no]: yes
Enter domain password:
Joining fam.local ... this may take a minute ...
failed to find any domain controllers for fam.local
Obviously it didn't help. It is a bit confusing with this domain realm. I found
in the net all possible variations: .<domain_name> / <kdc>.<domain_name> /
<domain_name>
Anyhow, this variation did not change the behaviour (even after reboot).
> I didn't check for NTP but you should also ensure
> that the time is synchronized between the Solaris
> system and your domain controler.
The times match perfectly... the master domain controller is set as ntp-server.
A visual check verifies that the times are in sync.
> The line below in your log is due to 6816936, which
> was fixed in snv_112.
>
> smbd[911]: [...] NbtDatagramDecode[11]: too small packet
>
> I'd recommend upgrading to a more recent build:
> snv_114 or later.
I would like to stay on the stable release - a server that is in sync with the
development release is not what I am dreaming of. I am not sure, whether this
would resolve this issue. I will give it a try afterwards.
Thanks for your hint anyway...
Still on the quest,
Marco
--
This message posted from opensolaris.org
_______________________________________________
cifs-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/cifs-discuss
