您好我正在尝试创建密钥表。此客户端系统已加入域。
下面我有一系列错误。看起来像 2 个主要错误,最值得注意的是:
create_local_private_krb5_conf_for_domain: smb_mkstemp failed, for
file /var/lib/samba/lock/smb_tmp_krb5.S7p77o. Errno Permission denied
.
ads_connect: No logon servers are currently available to service the logon request.
. 和
kerberos_kinit_password [email protected] failed: Client not found in Kerberos database
.
$ net ads keytab create
create_local_private_krb5_conf_for_domain: smb_mkstemp failed, for file /var/lib/samba/lock/smb_tmp_krb5.3KhTHs. Errno Permission denied
Enter user's password:
create_local_private_krb5_conf_for_domain: smb_mkstemp failed, for file /var/lib/samba/lock/smb_tmp_krb5.S7p77o. Errno Permission denied
ads_connect: No logon servers are currently available to service the logon request.
create_local_private_krb5_conf_for_domain: smb_mkstemp failed, for file /var/lib/samba/lock/smb_tmp_krb5.njsTEl. Errno Permission denied
kerberos_kinit_password [email protected] failed: Client not found in Kerberos database
create_local_private_krb5_conf_for_domain: smb_mkstemp failed, for file /var/lib/samba/lock/smb_tmp_krb5.hwnaei. Errno Permission denied
ads_connect: No logon servers are currently available to service the logon request.
使用须藤:
[user@hostname ~]$ sudo net ads keytab create
Enter root's password:
ads_connect: No logon servers are currently available to service the logon request.
kerberos_kinit_password [email protected] failed: Client not found in Kerberos database
ads_connect: No logon servers are currently available to service the logon request.
有谁知道至少哪个错误现在最重要?
你运行 kinit YOURADMINUSER 了吗?
那为我修好了。来自https://web.mit.edu/kerberos/krb5-1.12/doc/user/user_commands/kinit.html
这是创建密钥表所必需的,因为密钥表,
我们需要一张存储的第一张票。