Re: Active Directory and Kerberos authentication - Help?! (f…

Bryan.ONeal@asu.edu wrote:

>Not sure how to tell, the Windows box is authenticating, and I believe in a
>2003/XP environment it must be authenticating via Kerberos. I suppose I can
>boot off of knopix and try that.
>
>
Just a shot in the dark. A bit of Googling came up with
http://lilly.csoft.net/~vdebaere/handleiding/samba-activedirectory/index_en.html,
which says...

--------------/CUT/--------------------

In my case everything went ok, but there are a few commonly encountered
error messages:

    *

      kinit: krb5_get_init_creds: unable to reach any KDC in realm
      SAMPLEDOMAIN.INVALID

      The kerberos libraries were unable to find the KDC for the
      SAMPLEDOMAIN.INVALID realm. Check your /etc/resolv.conf settings.
      Make sure your Active Directory PDC is above all other entries. In
      case you don't want to mess with your nameserver settings, create
      a /etc/krb5.conf file with these contents:

[libdefaults]
    default_realm = SAMPLEDOMAIN.INVALID

[realms]
    SAMPLEDOMAIN.INVALID = {
        kdc = controller.sampledomain.invalid
    }

[domain_realms]
    .controller.sampledomain.invalid = SAMPLEDOMAIN.INVALID

--------------/CUT/--------------------

-- 
Darrin Chandler            |  Phoenix BSD Users Group
dwchandler@stilyagin.com   |  http://bsd.phoenix.az.us/
http://www.stilyagin.com/  |

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss