-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mann, Roy (RGMR) wrote: > I have a RedHat Enterprise 3 server running SAMBA 3.0.10. The server > has been joined to the Active Directory forest using its fully qualified > domain name. > Windows clients can successfully map drives using that fully qualified > name, However, services have a tendency to be moved or need failover > during maintenance > so I would prefer to tell customers to use a service alias like > smbserver3.rest.ofthe.domain.com. When clients use that alias, I can > see attempts at kerberos > authentication in the logs on the SAMBA server using the canonical FQDN > so Windows is getting the right address, talking to the right smbd, but > authentication fails.
If you are using CNAMES, add the appropriate servicePrincipalName to the machine's object in AD. Something like adsiedit works well. cheers, jerry ===================================================================== Samba ------- http://www.samba.org Centeris ----------- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFEsrHzIR7qMdg1EfYRAl4NAKDxB/r8GerHgzpW9G/APn0OAv2kFgCbBimt IFUv3coZwRA8eL0NVKSRRxE= =a3I8 -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
