[SSSD-users] net ads join & custom keytab

Sumit Bose sbose at redhat.com
Thu Apr 30 10:01:18 UTC 2015


On Thu, Apr 30, 2015 at 09:35:33AM +0000, Ondrej Valousek wrote:
> Hi List,
> 
> Just trying to make sssd working in the diskless environment. As such, I need to create Kerberos keytab on non-standard location:
> Krb5.conf:
> 
> [libdefaults]
> default_keytab_name = /var/lib/sss/krb5.keytab
> 
> But when I try to join domain via "net -d 10 ads join", I get this:
> ....
> smb_krb5_open_keytab: krb5_kt_default_name returned FILE:/etc/krb5.keytab
> smb_krb5_open_keytab: resolving: WRFILE:/etc/krb5.keytab
> ....
> 
> ? Looks like samba successfully ignores the default_keytab_name parameter

Please have a look at man smb.conf and look for 'dedicated keytab file'
and 'kerberos method'. If you do not have a smb.conf in your setup you
can give to options directly to the net command with the --option option
(many different kind of options :-)

HTH

bye,
Sumit
> 
> 
> Does anyone know what could be wrong?
> Thanks,
> 
> Ondrej
> 
> -----
> 
> The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications at s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.

> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users



More information about the sssd-users mailing list