Bug 5703 - The samba kerberos authentication does not work normally if FQDN name of the machine doesn't equal to hostname
Summary: The samba kerberos authentication does not work normally if FQDN name of the...
Status: RESOLVED INVALID
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: smbclient (show other bugs)
Version: 3.0.31
Hardware: Other Windows XP
: P3 normal
Target Milestone: none
Assignee: Samba Bugzilla Account
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-08-19 05:06 UTC by Kevin Qi
Modified: 2009-05-15 08:15 UTC (History)
1 user (show)

See Also:


Attachments
samba.log (15.15 KB, application/octet-stream)
2008-08-19 05:07 UTC, Kevin Qi
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Kevin Qi 2008-08-19 05:06:33 UTC
1)install the samba3.0.31 and configure 
2)setting an user for SSO samba
-bash-3.00$ smbclient -k -L localhost
OS=[Unix] Server=[Samba 3.0.31-cdc-4.2.0-147]

        Sharename       Type      Comment
        ---------       ----      -------
        samba-test      Disk
        IPC$            IPC       IPC Service (Samba-CDC)
        testone         Disk      Home directories
OS=[Unix] Server=[Samba 3.0.31-cdc-4.2.0-147]

        Server               Comment
        ---------            -------

        Workgroup            Master
        ---------            -------
        WONDER               B-SOL1064

3)modify the /etc/hosts
   192.168.168.15  b-sol8
change it into 
   192.168.168.15  localhost.localdomain  b-sol8

the sso samba
-bash-3.00$ smbclient -k -L localhost
cli_session_setup_blob: recieve failed (NT_STATUS_LOGON_FAILURE)
session setup failed: NT_STATUS_LOGON_FAILURE
Comment 1 Kevin Qi 2008-08-19 05:07:46 UTC
Created attachment 3491 [details]
samba.log

samba.log on the level10
Comment 2 Gerald (Jerry) Carter (dead mail address) 2008-08-19 07:21:42 UTC
You have basically changed the principal name of the system.  
Not fixing this unless unles you can provide a more convincing argument.
Comment 3 Kevin Qi 2008-08-20 01:37:18 UTC
wo don't change anything on the debian3.1.
the localhost.localdomain is in /etc/hosts by default,
so the samba kerberos authentication does not work, if we don't remove the localhost.localdomain.

So I think need to fix it on debian3.1
Comment 4 Gerald (Jerry) Carter (dead mail address) 2008-08-20 10:12:33 UTC
(In reply to comment #3)
> wo don't change anything on the debian3.1.
> the localhost.localdomain is in /etc/hosts by default,
> so the samba kerberos authentication does not work, if we don't remove the
> localhost.localdomain.
> 
> So I think need to fix it on debian3.1
> 

localhost should be an entry for 127.0.0.1.  You said in the original description 
"(3) modify the /etc/hosts" so perhaps this is just a debian bug.  I still consider
this a system misconfiguration issue and not a source code bug in Samba.

Comment 5 Kevin Qi 2008-08-20 23:47:22 UTC
yes, you are right, this is just a debian bug.
Since the line:"127.0.0.1       localhost.localdomain   localhost" is in /etc/hosts on debian by default.
if we don't remove the localhost.localdomain from /etc/hosts on debian, The samba kerberos authentication does not work.
Does it need to be fixed it?
Comment 6 Karolin Seeger 2009-05-15 08:15:52 UTC
Please open a Debian bug report as it seems to be an Debian issue.
Closing out bug report.