PS the account is stored in /etc/passwd in the same case as AD, ie in my problem it is
mixed case in
both locations,
thanks Andy.
-----Original Message-----
From: ww m-pubsyssamba
Sent: 06 May 2004 10:12
To: 'Jeremy Allison'; '[EMAIL PROTECTED]'
Subject: RE: [Samba] Kerberos case sensitive with Mac OS X on Samba
3.0.x
Hi Jeremy/All,
I've attached a zip with both a good authentication (Kinit obtained using the
same case as account is
stored in AD) and also a bad authentication (Where I've obtained a ticket for a
username in all lower case
where the account is stored with mixed case in AD). The zip password is "samba"
thanks Andy.
-----Original Message-----
From: Jeremy Allison [mailto:[EMAIL PROTECTED]
Posted At: 05 May 2004 19:26
Posted To: Samba
Conversation: [Samba] Kerberos case sensitive with Mac OS X on Samba
3.0.x
Subject: Re: [Samba] Kerberos case sensitive with Mac OS X on Samba
3.0.x
On Wed, May 05, 2004 at 06:39:38PM +0100, ww m-pubsyssamba wrote:
> Hi List,
>
> I'm having an issue between Samba and OS X with regards to Kerberos
> authentication to a Samba AD member server.
> I'm using local UNIX accounts and entries in the passdb instead of Windind on the
> samba server, ie create account by adding
> to /etc/passwd then smbpasswd -a username. From an OS X client system if I obtain a
> ticket for user "UserA" like
> kinit [EMAIL PROTECTED] then when I run klist I see the default principal remebers
> the case I used to obtain the ticket.
> Now when I try and access my Samba member server I successfully recieve a ticket for
> the Samba server and am able to access
> the server as expected.
> However if I then try kinit [EMAIL PROTECTED] (username is wrong case) I again
> successfully recieve my TGT but with
> the default principal listed in lower case and when I try and access the Samba
> server I get this error "could not connect to server
> because user or password was incorrect". This is a big problem because when using
> the Apple AD plugin for authentication it
> always requested the ticket with a lower case username! Also this problem does not
> affect Kerberos authentiction to a Windows
> member server only Samba.
> Can anyone shed any light on this, whose fault is it? Samba or Apple?
Can you send in a debug level 10 log so we can try and determine where
the problem is ?
Thanks,
Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
