securelord
Junior Member | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
Система на ASPLinux, kerberos (MIT), Squid2.5, Samba 3.0.8
При входе в домен с линуховой машины пишет такую ошибку:
net ads join -U admin%2
[2006/05/09 19:41:05, 0] libads/ldap.c:ads_join_realm(1724)
ads_join_realm: ads_add_machine_acct failed (samba): Insufficient access
ads_join_realm: Insufficient access
В чем бок, не пойму....
Конфиг krb5.conf:
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = TRIEST.LOCAL
clockskew = 300
v4_instance_resolve = false
v4_name_convert = {
host = {
rcmd = host
ftp = ftp
}
plain = {
something = something-else
}
}
[realms]
TRIEST.LOCAL = {
default_domain = triest.local
kdc =server.triest.local
admin_server = server.triest.local
}
[domain_realm]
.triest.local = TRIEST.LOCAL
Конфиг Samba (global):
[global]
workgroup = triest
server string = Samba
netbios name = Samba
realm = triest.local
security = ads
password server = server.triest.local
encrypt passwords = yes
winbind separator = +
winbind use default domain = yes
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
|
