SMB from ODM with kerberos failing

[ebonweaver]

Ok, so I kerberized my new 10.5.4 ODM and so far client logins and afp connections work great . Now, connecting from windows does not work, and doing an smb or cifs connect from mac does not work either, I’m always told authentication failed. It seems like something is not configured right to allow kerberos authentication to work for smb (cifs). Here is the output of my smb settings:

smb:realm = “CAA-SALA-ODMSRV.SALA.PSU.EDU”
smb:lanman auth = “no”
smb:workgroup = “WORKGROUP”
smb:wins support = no
smb:domain master = no
smb:map to guest = “Never”
smb:enable print services = “yes”
smb:wins server = _empty_array
smb:use spnego = yes
smb:use kerberos keytab = yes
smb:security = “USER”
smb:server string = “caa-sala-odmsrv”
smb:auth methods = “odsam”
smb:ntlm auth = “no”
smb:netbios name = “caa-sala-odmsrv”
smb:max smbd processes = 100
smb:adminCommands:homes = yes
smb:adminCommands:serverRole = “standalone”
smb:adminCommands:ldapRole = “1.1 – hosting a master LDAP directory
server\n”
smb:dos charset = “CP437”
smb:log level = 2
smb:preferred master = no
smb:enable disk services = “yes”

I can’t help but feel like there are a few things in here that should say something else, but I don’t know what. Like auth method seems like it should say kerberos instead of odsam (whatever that is), and maybe the realm should be the university realm I kerberized to. At least it says yes for use keytab, but it’s still not happy. My keytab for cifs is:

3 08/17/08 00:54:24 cifs/caa-sala-odmsrv.sala.psu.edu@dce.psu.edu (Triple
DES cbc mode with HMAC/sha1)
3 08/17/08 00:54:24 cifs/caa-sala-odmsrv.sala.psu.edu@dce.psu.edu (DES
cbc mode with CRC-32)

The smb logs on the server, even on high, tell me nothing of any failed
connection attempts, there is no activity logged at all.

Any ideas?

[Author]

Posts