[Pkg-samba-maint] Bug#519570: Bug#519570: Kerberos working on samba 3.2.5 PDC, but failing when joining the domain

[Christian Perrier]

Quoting Eduardo Sachs (edu.sachs at terra.com.br):
> Package: samba
> Version: 2:3.2.5-4
> Severity: serious
> 
> Hello. I have a 3.2.5 Samba-LDAP PDC which shares the database with heimdal (so samba passwords are also kerberos passwords). I am able to use kerberos credentials to connect to the PDC shares with "smbclient -k", both on the server and linux workstations.
> 
> The problem is that, as soon as I try to join the PDC to its own domain (with "net join"), in order to be able to use winbind on the PDC, then I cannot use kerberos tickets anymore to connect to the PDC's shares, nor from the PDC nor from the workstations.
> 
> But if I don't join the PDC to the domain, I can join workstations to the domain, and still use kerberos tickets with "smbclient -k" on them, either these shares are on the PDC or on the workstation itself.
> 
> The Samba 3.0.x does not cause this problem, only in Samba 3.2.x and 3.3.X.


Hell Eduardo,

Since you reported that bug, we managed to publish backported packages
of samba 3.3.6:

http://packages.debian.org/lenny-backports/samba

To narrow this down, would it be possible for you to try these
package?


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20090723/a3df054b/attachment.pgp>