`<div dir="ltr"><div><div>Interesting. Using the trailing "." for an absolute FQDN works.<br></div>Any hints on how to make it work without the full FQDN?<br></div>I assume it's probably a kerberos related issue?<br><div><div><div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, May 13, 2015 at 8:10 AM, Dominik Hassler <span dir="ltr"><<a href="mailto:hasslerd@gmx.li" target="_blank">hasslerd@gmx.li</a>></span> wrote:<br><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Did you try to end your FQDN with a trailing dot?<br>
<br>
like: '<a href="http://DATA.HOME.example.net" target="_blank">DATA.HOME.example.net</a>.' in your example?<br>
<br>
<br>
Gesendet: Mittwoch, 13. Mai 2015 um 13:40 Uhr<br>
Von: "Matthew McGee" <<a href="mailto:mcgee@sci-world.net">mcgee@sci-world.net</a>><br>
An: <a href="mailto:omnios-discuss@lists.omniti.com">omnios-discuss@lists.omniti.com</a><br>
Betreff: [OmniOS-discuss] CIFS Issues<br>
<span class=""><br>
I am attempting to migrate my CIFS shares from FreeNAS to OmniOS.<br>
I have attempted a number of different installs and for now I am working in a VM<br>
for speed of reboots and testing.<br>
<br>
I have Windows 2012 AD, and a number of Mac OSX & Windows 7 clients.<br>
<br>
Server name = DATA<br>
</span>Domain <a href="http://HOME.example.net" target="_blank">HOME.example.net</a>[<a href="http://HOME.example.net" target="_blank">http://HOME.example.net</a>]<br>
I install the system, configure the IP of <a href="http://10.0.1.230/8[http://10.0.1.230/8]" target="_blank">10.0.1.230/8[http://10.0.1.230/8]</a>, set and test route, create a base boot environmentand a CIFS boot environment. Reboot into the CIFS boot environment.<br>
<span class=""> I have attempted going straight to Napp-it and I have tried manual initialization as follows:<br>
verify /etc/hosts and /etc/nodename entries<br>
Verify AD DNS<br>
verify system is using AD DNS server only<br>
nslookup to verify forward & reverse entries are functional and resolve on the host<br>
</span>pkg install kerberos-5# Tried with and without this setting<br>
<span class="">sharectl set -p ddns_enable=true<br>
klcient -T ms_ad<br>
kinit Administrator<br>
klist & verify output<br>
svcadm enable -r smb/server<br>
<br>
smbadm join -u Administrator<br>
Successful join<br>
smbadm list shows my domain.<br>
Verified kerberos delegation is allowed on the AD side.<br>
vi /etc/nsswitch.conf and add "ad" to passwd & group lines<br>
Have also tried adding smb line to pam<br>
<br>
<br>
Both of the following produce valid output<br>
</span>touch foo && chown <a href="mailto:myuser@HOME.example.net">myuser@HOME.example.net</a>[<a href="mailto:myuser@HOME.example.net">myuser@HOME.example.net</a>] && ls -l foo<br>
<span class="">id myuser@HOME # Although this doesn't show all my groups<br>
create a zfs filesystem and corresponding share called documents<br>
<br>
root@data:/root# smbutil view //myuser@DATA<br>
Password:<br>
Share Type Comment<br>
-------------------------------<br>
c$ disk Default Share<br>
documents disk<br>
IPC$ IPC Remote IPC<br>
vss$ disk VSS<br>
<br>
4 shares listed from 4 available<br>
<br>
When I attempt to access from a Windows 7 host, I see the following:<br>
<br>
\\DATA is not accessible. You might not have permission to use this network resource.<br>
Contact the administrator of this server to find out if you have access permissions.<br>
The account is not authorized to log in from this station.<br>
<br>
<br>
\\10.0.1.230 - Works, I can set permissions, read & write files<br>
<br>
Neither the netbios nor FQDN function, but it functions by IP.<br>
<br>
Samba on FreeNAS or Fedora works without issues, but I need working FC and comstar will do that for me.<br>
I cannot seem to get the CIFS piece working and it is the one thing preventing me from moving forward.<br>
Any assistance would be appreciated. I hate asking for help but I've been working on this every night for a month<br>
</span>and I know there must be one little thing I am missing, maybe a GPO?_______________________________________________ OmniOS-discuss mailing list <a href="mailto:OmniOS-discuss@lists.omniti.com">OmniOS-discuss@lists.omniti.com</a> <a href="http://lists.omniti.com/mailman/listinfo/omnios-discuss[http://lists.omniti.com/mailman/listinfo/omnios-discuss]" target="_blank">http://lists.omniti.com/mailman/listinfo/omnios-discuss[http://lists.omniti.com/mailman/listinfo/omnios-discuss]</a><br>
</blockquote></div><br></div></div></div></div></div>
`