Arch Linux

lifanov

Member

Registered: 2009-03-16

Posts: 44

[SOLVED] joining Arch to a Samba pdc

Hello.
I have a Samba pdc on Arch that works great with Windows XP clients for some time.
I was able to join (after starting heimdal-kdc on the server) an Arch client to the Samba pdc as per http://wiki.archlinux.org/index.php/Arc … ows_domain.
And it worked great until a reboot. Now gdm displays "authentication service cannot retrieve authentication info".
I found posts by Debian users that it might be the result of winbindd starting before the network is up, so I inserted openntpd between them and it still didn't help.

Here are some configs:

nsswitch.conf

# Begin /etc/nsswitch.conf

passwd: files winbind
group: files winbind
shadow: files winbind

publickey: files

hosts: files dns
networks: files

protocols: files
services: files
ethers: files
rpc: files

netgroup: files

# End /etc/nsswitch.conf

krb5.conf

[libdefaults]
        default_realm = LINUXGROUP.COM
    clockskew = 300
    ticket_lifetime = 1d    
    dns_lookup_realm = true
    dns_lookup_kdc = true
[realms]
    LINUXGROUP.COM = {
        kdc = 172.17.2.167
        admin_server = 172.17.2.167
        default_domain = linuxgroup.com
    }
[domain_realm]
    .linuxgroup.com = LINUXGROUP.COM
    linuxgroup.com = LINUXGROUP.COM
    linuxgroup = LINUXGROUP.COM
[appdefaults]
    pam = {
    ticket_lifetime = 1d
    renew_lifetime = 1d
    forwardable = true
    proxiable = false
    retain_after_close = false
    minimum_uid = 0
    debug = false
    }
[logging]
    default = SYSLOG:NOTICE:DAEMON
    kdc = FILE:/var/log/kdc.log

smb.conf

[Global]
netbios name = WELLLINUX07
workgroup = LINUXGROUP.COM
realm = LINUXGROUP.COM
server string = welllinux07
map to guest = Bad User
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
winbind gid = 10000-20000
winbind use default domain = yes
winbind separator =+
os level = 20

template shell = /bin/bash

encrypt passwords = yes
security = domain
password server = 172.17.2.167
preferred master = no
dns proxy = no
wins server = 172.17.2.167
wins proxy = no

interfaces=eth0

[homes]
comment = User´s homedirs
path =/home/%U
valid users = %S NET+%S
browseable = no
read only = no

Please help me to get it working after a reboot.

Last edited by lifanov (2009-11-01 22:02:03)

lifanov

Member

Registered: 2009-03-16

Posts: 44

Re: [SOLVED] joining Arch to a Samba pdc

I needed to init the realm in kadmin.