Kerberos and smbclient (and nsupdate)

[Smith Bill]

Hi

 

I have the following setup:

 

1 * Windows 2008 R2 Domain Controller

1 User (bill)

1 share on the Domain Controller (bill has Full Control in both the
share permissions and the ordinary user permissions).

1 Linux server (Redhat 5.2)

 

On the Windows server I have used ktpass and generated a keytab file.
This keytab file has then been transferred (via ftp) to the Linux
server.

On the Linux server I have run the kinit -f -t-k program and received a
Kerberos ticket (klist shows the ticket in the cache).

 

On the linux server I run smbclient //computer/share; it prompts me for
the password for user bill and then logs onto the share.

 

However, if I use smbclient -k //computer/share I get the message "tree
connect failed: NT_STATUS_ACCESS_DENIED".

 

Please note that my original intention was to use Kerberos to
authenticate for nsupdate -g commands but I have been sidetracked as
'nsupdate -g' returns a TSIG error.

 

Can anyone tell me what I have done wrong?

 

Regards

 

Bill Smith

Senior Solutions Architect

Architecture & Design H&NS North

Fujitsu Services

Tel: 07867 821165

Email:bill.smith at uk.fujitsu.com

 

 


Unless otherwise stated, this email has been sent from Fujitsu Services Limited, from Fujitsu (FTS) Limited, or from Fujitsu Telecommunications Europe Limited, together "Fujitsu".
 
This email is only for the use of its intended recipient.  Its contents are subject to a duty of confidence and may be privileged.  Fujitsu does not guarantee that this email has not been intercepted and amended or that it is virus-free.

Fujitsu Services Limited, registered in England No 96056, registered office 22 Baker Street, London W1U 3BW.

Fujitsu (FTS) Limited, registered in England No 03808613, registered office 22 Baker Street, London W1U 3BW.

Fujitsu Telecommunications Europe Limited, registered in England No 2548187, registered office Solihull Parkway, Birmingham Business Park, Birmingham, B37 7YU.