Hello I want to configure Samba AD on Fedora 39.
I have 2 DC replicating correctly. When I try to connect another computer as samba member with: sudo realm join OFFICE.COMPANY.COM it fails with this error * Trying to set computer password with Kerberos kvě 03 14:15:14 smbmem41.office.company.com realmd[315828]: ! Couldn't set password for computer account: SMBMEM41$: Cannot contact any KDC for requested realm kvě 03 14:15:14 smbmem41.office.company.com realmd[315828]: adcli: joining domain office.company.com failed: Couldn't set password for computer account: SMBMEM41$: Cannot contact any KDC for requested realm kvě 03 14:15:14 smbmem41.office.company.com realmd[315828]: process exited: 315924 kvě 03 14:15:14 smbmem41.office.company.com realmd[315828]: ! Failed to join the domain after investigation I've found there is problem with krb5kdc not listening on public IP on port 464 https://forums.opensuse.org/t/access-denied-between-windows-member-samba-adc-mit-krb5/144742 listening on IPv6 localhost [::1]:464 only sudo ss -tupln | grep 464 udp UNCONN 0 0 [::1]:464 [::]:* users:(("kdc[master]",pid=209134,fd=38)) tcp LISTEN 0 10 [::1]:464 [::]:* users:(("kdc[master]",pid=209134,fd=37)) I've tried to change configuration in file: /var/lib/samba/private/kdc.conf [kdcdefaults] kdc_listen = 0.0.0.0 kdc_tcp_listen = 0.0.0.0 kpasswd_listen = 127.0.0.1:464 192.168.95.111:464 kadmind_listen = 127.0.0.1 192.168.95.111 kdc_ports = 88 kdc_tcp_ports = 88 #kadmind_port = 464 restrict_anonymous_to_tgt = true when I change "kdc_tcp_listen" or "kadmind_listen" listening IPs are changing but change of "kpasswd_listen" directive make no difference. Is it bug in fedora samba package or I'm doing something wrong? Pavel
-- _______________________________________________ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
