[Pkg-samba-maint] Bug#519570: Kerberos working on samba 3.2.5 PDC, but failing when joining the domain

[Steve Langasek]

On Fri, Mar 13, 2009 at 09:53:11PM -0400, Eduardo Sachs wrote:
> > Why do you think that running 'net join' is necessary in order to use
> > winbind on the PDC?  

> I'm wrong when I say 'net join' need for Winbind, but, I need join the 
> Samba Member in the Samba PDC to be have features of a Domain Controller 
> for workstations Windows can access the Samba Member of the correct way.

> The question is, why when I join Samba Member in the Samba PDC  
> (with command 'net join'), the cifs client cannot more access Samba 
> Member with authentication Kerberos?

Your original bug report doesn't mention problems when joining a member
server to the domain with 'net join', it talks about problems when joining
the PDC to the domain with 'net join'.  In fact, you said that your member
servers that were joined did not have problems.  Can you explain again what
problem you're having with the member servers?

> In the page have setup of Samba PDC with authentication Kerberos, 
> for Debian Etch, stable setup: http://eduardosachs.org/mediawiki/

Ok - I guess the description of the problem is here:

http://eduardosachs.org/mediawiki/index.php?title=Heimdal_Kerberos_%2B_Samba_PDC_%2B_OpenLDAP_%2B_Squid_no_Debian_Lenny_(em_construção_-_NÃO_USAR_-_COM_BUG)#.2A.2A.2A_ATEN.C3.87.C3.83O.21.21.21_AVISO_IMPORTANTE.21.21.21_.2A.2A.2A

I'll try to reproduce the bug based on this description.

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org