Ubuntu
samba package

  1. Bug #1892145
  2. Comment #9

Comment 9 for bug 1892145

Revision history for this message
Andreas Hasenack (ahasenack) wrote : Re: smbclient cannot connect anonymously in Kerberos context (freeipa)

Interesting, on a machine where I installed smbclient and heimdal-clients, smbclient -L -N does grab the cifs/ kerberos ticket, even though I didn't supply -k:

ubuntu@focal-heimdal-client:~$ klist
klist: No ticket file: /tmp/krb5cc_1000

ubuntu@focal-heimdal-client:~$ kinit
<email address hidden>'s Password:

ubuntu@focal-heimdal-client:~$ smbclient -L focal-smbclient-kerberos.lxd -N

 Sharename Type Comment
 --------- ---- -------
 print$ Disk Printer Drivers
 storage Disk
 IPC$ IPC IPC Service (focal-smbclient-kerberos server (Samba, Ubuntu))
 ubuntu Disk Home directory of ubuntu
SMB1 disabled -- no workgroup available

ubuntu@focal-heimdal-client:~$ klist
Credentials cache: FILE:/tmp/krb5cc_1000
        Principal: <email address hidden>

  Issued Expires Principal
Aug 31 17:26:04 2020 Sep 1 03:26:04 2020 <email address hidden>
Aug 31 17:26:06 2020 Sep 1 03:26:04 2020 <email address hidden>

That is not the behavior when I'm using kinit from krb5-user (MIT).