[SSSD-users] net ads join & custom keytab
Sumit Bose
sbose at redhat.com
Thu Apr 30 10:01:18 UTC 2015
On Thu, Apr 30, 2015 at 09:35:33AM +0000, Ondrej Valousek wrote:
> Hi List,
>
> Just trying to make sssd working in the diskless environment. As such, I need to create Kerberos keytab on non-standard location:
> Krb5.conf:
>
> [libdefaults]
> default_keytab_name = /var/lib/sss/krb5.keytab
>
> But when I try to join domain via "net -d 10 ads join", I get this:
> ....
> smb_krb5_open_keytab: krb5_kt_default_name returned FILE:/etc/krb5.keytab
> smb_krb5_open_keytab: resolving: WRFILE:/etc/krb5.keytab
> ....
>
> ? Looks like samba successfully ignores the default_keytab_name parameter
Please have a look at man smb.conf and look for 'dedicated keytab file'
and 'kerberos method'. If you do not have a smb.conf in your setup you
can give to options directly to the net command with the --option option
(many different kind of options :-)
HTH
bye,
Sumit
>
>
> Does anyone know what could be wrong?
> Thanks,
>
> Ondrej
>
> -----
>
> The information contained in this e-mail and in any attachments is confidential and is designated solely for the attention of the intended recipient(s). If you are not an intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or any part thereof. If you have received this e-mail in error, please notify the sender by return e-mail and delete all copies of this e-mail from your computer system(s). Please direct any additional queries to: communications at s3group.com. Thank You. Silicon and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office: South County Business Park, Leopardstown, Dublin 18.
> _______________________________________________
> sssd-users mailing list
> sssd-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/sssd-users
More information about the sssd-users
mailing list