Arch Linux

debellator

Member

From: Hamburg

Registered: 2012-07-23

Posts: 24

[SOLVED]Access shares in Active Directory env w/o asking for pword

Hello,

read this and configured my computer like described. So far so good. When I know use my file manager and want to access smb://fileserver/share he askes me for a password.

When I first used Ubuntu there was a software called Likewyse open which made AD integration very easy and smooth unfortunately this software is not available for AL.

Never the less I hope there is another opportunity to get rid of the password question. When I searched for an answer the first thing I saw was that I can use a .credential file.  As I do not like to write down my password either on paper or a file this is no real solution to me.

Do I have to change something in /etc/nsswitch.conf, smb.conf or consolekit?

I would be very grateful if someone can give me some help.

Last edited by debellator (2012-10-17 08:07:54)

beaverusiv

Member

From: Taupo, New Zealand

Registered: 2011-07-09

Posts: 41

Re: [SOLVED]Access shares in Active Directory env w/o asking for pword

What does runnning klist output?

debellator

Member

From: Hamburg

Registered: 2012-07-23

Posts: 24

Re: [SOLVED]Access shares in Active Directory env w/o asking for pword

What does runnning klist output?

klist gave me an error that no ticket exists. After doing kinit user@DOMAIN.COM I got a ticket and could access shares without extra login.

To make this permanent I found this article. After editing /etc/security/pam_winbind.conf it works as I wanted it.

#
# pam_winbind configuration file
#
# /etc/security/pam_winbind.conf
#
[global]
# authenticate using kerberos
krb5_auth = yes

# when using kerberos, request a "FILE" krb5 credential cache type
# (leave empty to just do krb5 authentication but not have a ticket
# afterwards)
krb5_ccache_type = FILE

Many thanks for the hint.

beaverusiv

Member

From: Taupo, New Zealand

Registered: 2011-07-09

Posts: 41

Re: [SOLVED]Access shares in Active Directory env w/o asking for pword

Cheers. Remember to add [SOLVED] to the title, thanks