On Mon, 2010-09-06 at 01:33 -0400, rajat swarup wrote: > On Mon, Sep 6, 2010 at 12:54 AM, Neil Balchin <[email protected]> wrote: > > I've tried that, i ran > > > > cp /usr/local/samba/private/krb5.conf /etc/krb5.conf > > > > contents of /etc/krb5.conf > > are > > ...... > > > > [libdefaults] > > default_realm = MYDOMAIN.COM > > dns_lookup_realm = false > > dns_lookup_kdc = false > > ticket_lifetime = 24h > > forwardable = yes > > > > [realms] > > MYDOMAIN.COM = { > > kdc = pdc.mydomain.com:88 > > admin_server = pdc.mydomain.com:749 > > default_domain = mydomain.com > > } > > > > [domain_realm] > > .mydomain.com = MYDOMAIN.COM > > mydomain.com = MYDOMAIN.COM > > > > Change the contents of /etc/krb5.conf to > [libdefaults] > dns_lookup_realm = true > dns_lookup_kdc = true > > Even though the system is using DNS kerberos doesn't use DNS due to > the settings that you've configured.
I'll fix up the defaults here - they are indeed incorrect. Sorry for the bother! Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Cisco Inc.
signature.asc
Description: This is a digitally signed message part
-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
