SAMBA Kerberos and MC/ServiceGuard

[Rob Beglinger]

I've been tasked with getting Samba 3.0.22 configured in a MC/ServiceGuard package, running in an MS Active Directory 2003 native environment using Kerberos authentication. I've been successful doing this on stand-alone servers, but haven't tried it in a clustered environment and was hoping to get suggestions on how best to accomplish this task.

Here's my environment:

HP-UX 11.11
HP CIFS Server A.02.03
Kerberos V5 Client Version 1.0
MC/ServiceGuard A.11.15.00

[D Block 2]

can you provide more about the package start ? So, you want Samba to start via a package on one node ?

[Rob Beglinger]

I apologize my first post was poorly written. I currently have SAMBA 2.28 running on multiple MC/ServiceGuard clusters, each with its own config and startup files in the clustered file system as part of an NT 4.0 domain. My question is how to get Kerberos working properly on a cluster. Do the Kerberos tickets get assigned to the physical host or the package? If they get assigned to the package, how would the Kerberos tickets fail-over to another node? Is it possible to have multilple SAMBA/Kerberos sessions on one node?

[Geoff Wild · Accepted solution]

As far as I know, the tickets are assigned to the host...

I have Samba with ads running as part of my Oracle/SAP package - didn't have to do anything special for Kerberos...other then setup a generic /etc/krb5.conf


My setup was completed via steps in my thread here:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=949365

Rgds...Geoff

[Rob Beglinger]

Thanks for pointing me in the right direction.