From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <sb_lu@polsb.pi.net.ua>
Message-ID: <4705D50F.5020706@polsb.pi.net.ua>
Date: Fri, 05 Oct 2007 09:09:19 +0300
From: Bogaevskiy Jurij <sb_lu@polsb.pi.net.ua>
MIME-Version: 1.0
To: ALT Linux Community <community@lists.altlinux.org>
References: <4704A3BD.4050905@mail.ru>	<200710041702.21851.sendmeforever@mail.ru>	<4704DC8B.7010006@mail.ru>
	<47050B3B.9040602@polsb.pi.net.ua>
	<4705C958.4060608@polsb.pi.net.ua> <4705CF50.8010102@mail.ru>
In-Reply-To: <4705CF50.8010102@mail.ru>
Content-Type: text/plain; charset=KOI8-R; format=flowed
Content-Transfer-Encoding: 8bit
X-Authenticated-Sender: sb_lu@polsb.pi.net.ua
X-Return-Path: sb_lu@polsb.pi.net.ua
X-MDaemon-Deliver-To: community@lists.altlinux.org
Subject: Re: [Comm] ALD 4.0 + Windows 2003 Active Directory
X-BeenThere: community@lists.altlinux.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: sb_lu@polsb.pi.net.ua, ALT Linux Community general discussions
	<community@lists.altlinux.org>
List-Id: ALT Linux Community general discussions <community.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/community>
List-Post: <mailto:community@lists.altlinux.org>
List-Help: <mailto:community-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Fri, 05 Oct 2007 06:10:15 -0000
Archived-At: <http://lore.altlinux.org/community/4705D50F.5020706@polsb.pi.net.ua/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>

Mike Kudashev пишет:
> Bogaevskiy Jurij пишет:
>> Bogaevskiy Jurij пишет:
>>>>  
>>> А у меня
>>> checking the trust secret via RPC calls failed
>>> error code was NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND (0xc0000233)
>>> Could not check secret
>>>
>>> Хотя
>>> # net ads info
>>> информацию о адресе, имени и времени выдает правильно
>>>
>>>
>>>
>>>
>> По совету отсюда:
>> http://www.webservertalk.com/archive217-2004-4-191958.html
>> сделал
>> После перезагрузки все заработало.
> Эту статью я вчера видел и сменил имя в самбе с U1014 на IT04.
> В оснастке Active Directory данных о компьютерах вообще нет.
> Эффекта мне не дало.
> Юрий, у вас krb.conf какой?
>
>
Правда у меня домен w2k
вот мой krb5.conf
[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 ticket_lifetime = 24000
 default_realm = localdomain.localdomain
 dns_lookup_realm = false
 dns_lookup_kdc = false

[realms]
 EXAMPLE.COM = {
  kdc = server.localdomain.localdomain:88
  admin_server = server.localdomain.localdomain:749
  default_domain = localdomain.localdomain
 }

[domain_realm]
 .localdomain.localdomain = LOCALDOMAIN.LOCALDOMAIN
 localdomain.localdomain = LOCALDOMAIN.LOCALDOMAIN


[kdc]
 profile = /var/lib/kerberos/krb5kdc/kdc.conf

[pam]
 debug = false
 ticket_lifetime = 36000
 renew_lifetime = 36000
 forwardable = true
 krb4_convert = false