Interesting, on a machine where I installed smbclient and heimdal-
clients, smbclient -L -N does grab the cifs/ kerberos ticket, even
though I didn't supply -k:

ubuntu@focal-heimdal-client:~$ klist
klist: No ticket file: /tmp/krb5cc_1000

ubuntu@focal-heimdal-client:~$ kinit
ubu...@example.com's Password: 

ubuntu@focal-heimdal-client:~$ smbclient -L focal-smbclient-kerberos.lxd
-N

        Sharename       Type      Comment
        ---------       ----      -------
        print$          Disk      Printer Drivers
        storage         Disk      
        IPC$            IPC       IPC Service (focal-smbclient-kerberos server 
(Samba, Ubuntu))
        ubuntu          Disk      Home directory of ubuntu
SMB1 disabled -- no workgroup available

ubuntu@focal-heimdal-client:~$ klist
Credentials cache: FILE:/tmp/krb5cc_1000
        Principal: ubu...@example.com

  Issued                Expires               Principal
Aug 31 17:26:04 2020  Sep  1 03:26:04 2020  krbtgt/example....@example.com
Aug 31 17:26:06 2020  Sep  1 03:26:04 2020  
cifs/focal-smbclient-kerberos....@example.com


That is not the behavior when I'm using kinit from krb5-user (MIT).

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1892145

Title:
  smbclient cannot connect anonymously in Kerberos context (freeipa)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1892145/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to