<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 10/29/2014 05:01 PM, Loris
Santamaria wrote:<br>
</div>
<blockquote cite="mid:1414616519.3112.28.camel@toron.pzo.lgs.com.ve"
type="cite">
<pre wrap="">El mié, 29-10-2014 a las 21:40 +0100, John Obaterspok escribió:
</pre>
<blockquote type="cite">
<pre wrap="">Hello,
I've tried this as well. My IPA is not connected to an AD. My smb.conf
looks almost the same. The differences are:
- I got the default workgroup set (MY or something)
- No <a class="moz-txt-link-freetext" href="FILE:/">FILE:/</a> prefix for keytab file
I had the samba and ipserver on the same box so I just had to add the
cifs server and get keytab file in the same way.
I was a bit surprised to see that accessing samba using "smbclient -k
\\..." worked right away from a linux box. Then stopped working if I
did kdestroy.
But, I never got it to work from Windows. The Windows PC is not joined
to any AD, it uses MIT Kerb client 4.0.1 and I successfully get tickes
and can sshlogin via putty without password.
Any ideas on how to get this going from Windows as well?
</pre>
</blockquote>
<pre wrap="">
I guess you should prepare the ipa server for a windows domain trust
(even if you won't setup any trust with an ad domain), with
ipa-adtrust-install. Beware that it will overwrite your smb.conf.
With that configuration and the steps described in
<a class="moz-txt-link-freetext" href="http://www.redhat.com/archives/freeipa-users/2013-September/msg00226.html">http://www.redhat.com/archives/freeipa-users/2013-September/msg00226.html</a> you will be able to use the native windows kerberos libraries and you should be able to open a samba share with your kerberos credentials.
Best regards
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
Would by any chance you be able to create a HowTo solution on the
FreeIPA wiki?<br>
Seems like it would be a simple cut&paste from couple mails.
Thanks in advance!<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.freeipa.org/page/Contribute/Documentation">http://www.freeipa.org/page/Contribute/Documentation</a><br>
<a class="moz-txt-link-freetext" href="http://www.freeipa.org/page/HowTos">http://www.freeipa.org/page/HowTos</a><br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager IdM portfolio
Red Hat, Inc.</pre>
</body>
</html>