Bug 5703 - The samba kerberos authentication does not work normally if FQDN name of the machine doesn't equal to hostname
The samba kerberos authentication does not work normally if FQDN name of the...
Status: RESOLVED INVALID
Product: Samba 3.0
Classification: Unclassified
Component: smbclient
3.0.31
Other Windows XP
: P3 normal
: none
Assigned To: Samba Bugzilla Account
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2008-08-19 05:06 UTC by Kevin Qi
Modified: 2009-05-15 08:15 UTC (History)
1 user (show)

See Also:


Attachments
samba.log (15.15 KB, application/octet-stream)
2008-08-19 05:07 UTC, Kevin Qi
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Kevin Qi 2008-08-19 05:06:33 UTC
1)install the samba3.0.31 and configure 
2)setting an user for SSO samba
-bash-3.00$ smbclient -k -L localhost
OS=[Unix] Server=[Samba 3.0.31-cdc-4.2.0-147]

        Sharename       Type      Comment
        ---------       ----      -------
        samba-test      Disk
        IPC$            IPC       IPC Service (Samba-CDC)
        testone         Disk      Home directories
OS=[Unix] Server=[Samba 3.0.31-cdc-4.2.0-147]

        Server               Comment
        ---------            -------

        Workgroup            Master
        ---------            -------
        WONDER               B-SOL1064

3)modify the /etc/hosts
   192.168.168.15  b-sol8
change it into 
   192.168.168.15  localhost.localdomain  b-sol8

the sso samba
-bash-3.00$ smbclient -k -L localhost
cli_session_setup_blob: recieve failed (NT_STATUS_LOGON_FAILURE)
session setup failed: NT_STATUS_LOGON_FAILURE
Comment 1 Kevin Qi 2008-08-19 05:07:46 UTC
Created attachment 3491 [details]
samba.log

samba.log on the level10
Comment 2 Gerald (Jerry) Carter 2008-08-19 07:21:42 UTC
You have basically changed the principal name of the system.  
Not fixing this unless unles you can provide a more convincing argument.
Comment 3 Kevin Qi 2008-08-20 01:37:18 UTC
wo don't change anything on the debian3.1.
the localhost.localdomain is in /etc/hosts by default,
so the samba kerberos authentication does not work, if we don't remove the localhost.localdomain.

So I think need to fix it on debian3.1
Comment 4 Gerald (Jerry) Carter 2008-08-20 10:12:33 UTC
(In reply to comment #3)
> wo don't change anything on the debian3.1.
> the localhost.localdomain is in /etc/hosts by default,
> so the samba kerberos authentication does not work, if we don't remove the
> localhost.localdomain.
> 
> So I think need to fix it on debian3.1
> 

localhost should be an entry for 127.0.0.1.  You said in the original description 
"(3) modify the /etc/hosts" so perhaps this is just a debian bug.  I still consider
this a system misconfiguration issue and not a source code bug in Samba.

Comment 5 Kevin Qi 2008-08-20 23:47:22 UTC
yes, you are right, this is just a debian bug.
Since the line:"127.0.0.1       localhost.localdomain   localhost" is in /etc/hosts on debian by default.
if we don't remove the localhost.localdomain from /etc/hosts on debian, The samba kerberos authentication does not work.
Does it need to be fixed it?
Comment 6 Karolin Seeger 2009-05-15 08:15:52 UTC
Please open a Debian bug report as it seems to be an Debian issue.
Closing out bug report.