Re: [Comm] samba+ads+winbind=проблемы?

Re: [Comm] samba+ads+winbind=проблемы?

[Stavr]

> ________________________________________
> krb5.conf
> [logging]
>  default = FILE:/var/log/krb5libs.log
>  kdc = FILE:/var/log/krb5kdc.log
>  admin_server = FILE:/var/log/kadmind.log
>  
>  
> [libdefaults]
>  ticket_lifetime = 24000
>  default_realm = MOSCOW.POSTSHOP.RU
>  dns_lookup_realm = true
>  default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc
>  default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc
> [realms]
>   MOSCOW.POSTSHOP.RU = {
>     kdc = 192.168.1.254
>     admin_server = 192.168.1.254
>     default_domain = MOSCOW.POSTSHOP.RU

в kdc и admin_server правильно прописывать имена компов и нужно указать порты
[realms]
 MYDOMAIN.LOCAL = {
  kdc = srvinit.mydomain.local:88
  admin_server = srvinit.mydomain.local:749
  default_domain = mydomain.local
 }



>   }
> [domain_realm]
>  .moscow.postshop.ru = MOSCOW.POSTSHOP.RU
>  moscow.postshop.ru = MOSCOW.POSTSHOP.RU
> [kdc]
>  profile = /var/kerberos/krb5kdc/kdc.conf
> [appdefaults]
>  pam = {
>    debug = false
>    ticket_lifetime = 36000
>    renew_lifetime = 36000
>    forwardable = true
>    krb4_convert = false
>  }
>  
> ________________________________________