Samba authentication with Microsoft AD

[Simeon Harwood]

Hi all,
Has anyone seen this before?
First of all, the setup: -
Microsoft Windows 2003 server running Active directory on 2 servers in one domain.
HP UX 11i (v1) running CIFS as a client to the domain.
# swlist |grep -i cif
B8724AA A.01.09.03 CIFS Client
B8725AA A.02.01.01 HP CIFS Server

I've installed CIFS on my HPUX boxes, and have set up shares etc.
I've then run "samba-setup" to get SAMBA to join my MS domain using adsvr1 as my primary target.
So I'm now setup with the following setting in my smb.conf: -
security = ADS
wins server = 172.16.1.1 , 172.16.1.2
password server = adsvr1 , adsvr2

in my "/etc/krb5.conf" file, I have: -
kdc = adsvr1:88
kdc = adsvr2:88
admin_server = adsvr1
admin_server = adsvr2

Everything works fine, I can authenticate correctly.
We then did a test where we rebooted adsvr1, and expected the authentication to carry on aginst adsvr2, but this didn't happen.
As soon as adsvr1 comes backup, everything is back to normal again.

So my question is: -
Should cifs be able to stand the primary AD server rebooting and use another AD server in the domain or not?

Any help would be appreciated very much.

Thanks,
Sime.

[Steven E. Protter · Accepted solution]

Shalom,

First look, you need the latest version of CIFS client and Server to have a prayer of this working out.

http://www.docs.hp.com/en/15204/CIFSUnifiedLogin.pdf

That is the doc to use.

Go to http://software.hp.com and get the latest version.

SEP

[Simeon Harwood]

I was begining to this this, as I was having no luck. I'll read through the doc, and put a testing plan together.

Thanks.

[Simeon Harwood]

I'm off to do some testing now, to see if I can get this to work.