My Samba server with ADS authentication suddenly stopped working .
When I gave wbinfo -u and getent passwd it was all working fine.
Then i tried kinit username@domain.tld and it gave the error
kinit(v5): Cannot find KDC for requested realm while getting initial credentials
I set dns_lookup_kdc = true in krb5.conf
Next it gave the error
kinit(v5): Clock skew too great while getting initial credentials
For some reason the ntp synchronization with my Windows AD had stopped.
I went to system-config-time and reconfigured the ntp server as the AD and it worked.
Well later I figured out that the first error was because I gave lower case in the domain name in the kinit statement and the actual problem was not that.Anyway with the dns_lookup_kdc = true in the krb5.conf lower case also seems to work....................:-)
No comments:
Post a Comment