Is anyone running Samba 4.23 as an Active Directory DC with MIT Kerberos on FreeBSD 15/15.1?

M

majortom

Built Samba 4.23 from ports, selecting MIT Kerberos. Used samba-tool to configure it
Code: 
samba-tool domain provision --use-rfc2307 --realm=SAMBA.EXAMPLE.COM --domain=SAMBA --server-role=dc --dns-backend=SAMBA_INTERNAL --option="interfaces = 172.16.15.77, 172.20.12.41" --option="bind interfaces only = yes" --option="idmap_ldb:use rfc2307 = yes" --option="server services = -nbt" --adminpass="MySuperSecurePassworl"

service samba_server start
Performing sanity check on Samba configuration: OK
Starting samba.
log.samba contains:
Code: 
[2026/07/07 12:16:34.216107,  0] ../../source4/samba/server.c:636(binary_smbd_main)
  samba version 4.23.8 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2025
mitkdc: /usr/local/sbin/krb5kdc: Stash file (null) uses DEPRECATED enctype !
mitkdc: Interrupted system call mitkdc_server_done: The MIT KDC daemon died with exit status 1
mitkdc: Interrupted system call task_server_terminate: task_server_terminate: [mitkdc child process exited]
[2026/07/07 12:16:34.518956,  0] ../../source4/samba/server.c:404(samba_terminate)
  samba_terminate: samba_terminate of samba 12556: mitkdc child process exited
mit-kdc.log contains:
Code: 
Jul 07 12:16:34 samba krb5kdc[20163](info): Loaded
Jul 07 12:16:34 samba krb5kdc[20163](Error): preauth pkinit failed to initialize: PKINIT initialization fai
led: No pkinit_identity supplied for realm SAMBA.EXAMPLE.COM
Jul 07 12:16:34 samba krb5kdc[20163](Error): preauth spake failed to initialize: No SPAKE preauth groups co
nfigured
Jul 07 12:16:34 samba krb5kdc[20163](info): setting up network...
Jul 07 12:16:34 samba krb5kdc[20163](info): setsockopt(14,IPV6_V6ONLY,1) worked
Jul 07 12:16:34 samba krb5kdc[20163](Error): Can't assign requested address - Cannot bind server socket on 
[::]:88
Jul 07 12:16:34 samba krb5kdc[20163](Error): Failed setting up a UDP socket (for ::)
Jul 07 12:16:34 samba krb5kdc[20163](Error): Can't assign requested address - Error setting up network
mit_kdc.log
 
can you used this dc manage windows client and linux client , freebsd client likes as windows server 2022 AD ? thanks.
 
Samba4 support on FreeBSD seems temperamental these days (in regards to a full ad setup) and will likely give you a few headaches but, assuming it was working, you would use the same tools as if you had a Windows AD server without the desktop experience. Install the RSAT utilities on a domain-joined workstation and use the normal AD Users & Computers, Group Policy, etc MMC applications.
 
You must log in or register to reply here.
Back
Top