Solaris 10 - samba - zones - kerberos

Anyone (Jed?) with experience in setting up samba for use on a TeamSite (6.7.1) server running on Solaris 10?

I don't know all the details, but what I think I understood from the local Unix admin I'm working with is that there is some issue with trying to set up samba in the same global zone as TS and it somehow trashing the kerberos keytab - and thus samba needs to be set up in another zone and then ... I don't know.

If anyone can shed some light on the configuration of this it would be appreciated (or - if the local Unix admin here figures it out I'll try to get the details to post here).

Thanks

Find more posts tagged with

Comments

jed

Anyone (Jed?) with experience in setting up samba for use on a TeamSite (6.7.1) server running on Solaris 10?

I don't know all the details, but what I think I understood from the local Unix admin I'm working with is that there is some issue with trying to set up samba in the same global zone as TS and it somehow trashing the kerberos keytab - and thus samba needs to be set up in another zone and then ... I don't know.

Thankfully, we do not use Samba, or kerberos. I am not sure why you would need to put Samba in another zone. Since a zone is essentially a separate logical instance of Solaris, I imagine putting samba in another zone would complicate things more.

dendogramm.html

Adam Stoller

Thankfully, we do not use Samba, or kerberos. I am not sure why you would need to put Samba in another zone. Since a zone is essentially a separate logical instance of Solaris, I imagine putting samba in another zone would complicate things more.

Apparently the second zone is a last-resort (as I understand it) - the issue is something to do with the way samba generates keytabs that are not aligned with the NIS/Kerberos keytabs (again, as I understand it - which is minimal)

The IT folks here are still working on it - there may be a newer version of samba that resolves the problem ... (hopefully)

Thanks anyway

JackIntheBox

I saw this just on time. I am installing TeamSite 6.7.1 on Solaris 10 as we speak. and will avoid Samba for now.

Apparently the second zone is a last-resort (as I understand it) - the issue is something to do with the way samba generates keytabs that are not aligned with the NIS/Kerberos keytabs (again, as I understand it - which is minimal)

The IT folks here are still working on it - there may be a newer version of samba that resolves the problem ... (hopefully)

Thanks anyway

Adam Stoller

I saw this just on time. I am installing TeamSite 6.7.1 on Solaris 10 as we speak. and will avoid Samba for now.

My latest understanding is that this is a Samba (v3) and Kerberos issue and not a Solaris 10 issue.

So if you aren't using Kerberos authentication you should be okay (and it would be interesting to know if, in fact, it does work for you)