Comment 17 for bug 236830

Hi Steve,

I had downloaded the source tarball from Samba.org at home and I'm not able to download the source deb from Intrepid at work, so I built Samba 3.2.0 from source and created a deb with checkinstall. Quick & dirty.

After pulling in the correct -dev packages, I configured with:

./configure --enable-cups --with-ads --with-cifsmount --with-ldap --enable-fam --with-cifsspnego --with-dnsupdate --with-automount --with-winbind --with-krb5

I installed the new version of samba in /usr/local/samba and installed the kernel from -proposed.

I followed your instructions above (the request-key.conf stuff) and I am now able to mount a cifs share on my machine. So the kernel patch works, that's for sure; at least for a Kerberos cache generated during Likewise login (I use Likewise Open).

What does surprise me a bit is the fact that if I klist, I can see my TGT and, directly after mount, the host ticket from the fileserver. After a while though, the latter disappears, even though I still have the cifs share mounted and accessible. Maybe that has something to do with Likewise; I'm more used to using pam_krb5, which does not purge tickets this soon.

Apart from that, I can only mount the cifs share with sec=krb, not with sec=krb5i. During debugging this, I found that cifs.spnego segfaults horribly when started on it's own. As said, mounting seems to work though. I'll try downloading the Intrepid samba source deb at home tonight, maybe you guys have applied some patches on it?