mibisystems

Samba 3.0

Samba 3 is available, and for those wanting to try it, here are some initial comments on how to join using more secure authentication than Samba 2.2.x. This process was tested with RedHat 9.0 but is not guaranteed to work with all distributions.

Samba 3.0.1 broke Kerberos that worked in 3.0.0. In the meantime use Samba 2.2.8a, which is more stable, or Samba 3.0 with NTLMv2, which is already a major improvement over the basic NTLM that was the only secure protocol available in Samba 2.0

The error is visible in the log files:

Smbd/sessetup.c::reply_spnego_kerberos(172)

Failed to verify incoming ticket!

Kerberos requires the MIT kerb5-workstation package to be installed

Step 1 edit the smb.conf file. This is setup to use NTLMv2

Parameters that must be changed from their defaults:

workgroup = AGILENT

security = DOMAIN

;security = ADS # Kerberos config

;realm = AGILENT.COM # Kerberos config

password server = *

encrypt passwords = YES

lanman auth = NO

local master = NO

domain master = NO

preferred master = NO

wins server = wins # name or IP address of a local WINS

server, often aliased to wins

Step 2 Join the Domain

$ net rpc join