<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
<div class="moz-forward-container">
<p>Hello everyone,</p>
<p><br>
</p>
<p>I am trying to integrate a samba server over my freeipa
install. For the moment, basics first,</p>
<p>the samba server is on the same machine as freeipa (which fqdn
is "freeipa2.ljll.math.upmc.fr").<br>
</p>
<p>Yet I am unable to make it work correctly following the <a
moz-do-not-send="true"
href="http://www.freeipa.org/page/Howto/Integrating_a_Samba_File_Server_With_IPA">official
howto</a>.</p>
<p><i>I must precise that I am running on an Ubuntu 16.04 server.</i></p>
<p>Here are the steps :</p>
<pre>0) ipa-adtrust-install</pre>
<pre> -> everything correct</pre>
<pre>1) installing required packages</pre>
<pre> -> needed to change the names to "apt-get install freeipa-client libwbclient-sssd samba samba-client" but worked fine
</pre>
<pre>2) <code>ipa-client-install --mkhomedir</code></pre>
<pre> -> as we are on the same server, ipa-client is already installed</pre>
<pre>3) <code>ipa service-add cifs/freeipa2.ljll.math.upmc.fr</code></pre>
<pre><code></code></pre>
<pre> -> seems to be working fine, yet not doing it gives the exact same results later ..</pre>
<pre>4) <code>ipa-getkeytab -s freeipa2.ljll.math.upmc.fr -p cifs/freeipa2.ljll.math.upmc.fr -k /etc/samba/samba.keytab</code></pre>
<pre><code> -> OK</code></pre>
<pre><code>5) Editing /etc/samba/smb.conf</code></pre>
<pre><code>6) enabling samba /home sharing
-> no selinux here so nothing to do
7) restart samba
-> OK
</code>
</pre>
<code></code><code></code>After getting a kerberos ticket, `<code>smbclient
-k -L freeipa2.ljll.math.upmc.fr` gives :<br>
<br>
</code>
<pre><code></code>krb5_init_context failed (invalid argument)</pre>
<pre>smb_krb5_context_init_basic failed (invalid argument)</pre>
<pre>Failed to initialize kerberos context! (invalid argument)</pre>
<pre>session setup failed: NT_STATUS_NO_MEMORY</pre>
<br>
<br>
Editing /etc/samba/smb.conf to comment the `security = ads` line
makes it more verbose:<br>
<pre>krb5_init_context failed (Argument invalide)</pre>
<pre>smb_krb5_context_init_basic failed (Argument invalide)</pre>
<pre>Domain=[LJLL] OS=[Windows 6.1] Server=[Samba 4.3.11-Ubuntu]</pre>
<pre> Sharename Type Comment</pre>
<pre> --------- ---- -------</pre>
<pre>krb5_init_context failed (Argument invalide)</pre>
<pre>smb_krb5_context_init_basic failed (Argument invalide)</pre>
<pre> print$ Disk Printer Drivers</pre>
<pre> shared Disk </pre>
<pre> IPC$ IPC IPC Service (freeipa2 server (Samba, Ubuntu))</pre>
<pre>krb5_init_context failed (Argument invalide)</pre>
<pre>smb_krb5_context_init_basic failed (Argument invalide)</pre>
<pre>Domain=[LJLL] OS=[Windows 6.1] Server=[Samba 4.3.11-Ubuntu]</pre>
<pre> Server Comment</pre>
<pre> --------- -------</pre>
<pre> FREEIPA2 freeipa2 server (Samba, Ubuntu)</pre>
<pre> Workgroup Master</pre>
<pre> --------- -------</pre>
<pre> LJLL
</pre>
Does anyone have ideas how to solve this ?<br>
<br>
Many thanks in advance,<br>
Sebastien.<br>
</div>
</body>
</html>