Amanda-Users

Backing up a Windows 2k3 share via Samba using Kerberos

2004-01-11 15:12:22
Subject: Backing up a Windows 2k3 share via Samba using Kerberos
From: Fran Fabrizio <fran AT cis.uab DOT edu>
To: amanda-users AT amanda DOT org
Date: Sun, 11 Jan 2004 14:10:07 -0600
I want to back up my Windows /home userspace, which is served as part of
a dfs volume (//server/dfs/home to be precise) from our Windows 2k3
ADS.  Here's what I've done so far on the Amanda linux RH9 box:

1. Installed Samba 3.0
2. Installed MIT Kerberos 5
3. Setup Kerberos to point to the right realm
4. su to user 'amanda'
5. Ran 'kinit administrator@MYREALM' and authenticated successfully
6. Ran 'smbclient -k //server/dfs' and I get an smb> prompt without
being asked for a password and I can see and browse the /home space.

So far, so good.  I then:

7. Setup /etc/amandapass with //server/dfs and the user%pass and domain
8. Added //server/dfs/home to the disklist
9. Ran amcheck, and it reported 0 problems.

However, overnight it ran and failed with the following errors:

/-- keep.cis.u //server/dfs/home lev 0 FAILED [no backup size line]
sendbackup: start [keep.cis.uab.edu://server/dfs/home level 0]
sendbackup: info BACKUP=/usr/bin/smbclient
sendbackup: info RECOVER_CMD=/bin/gzip -dc |/usr/bin/smbclient -f... -
sendbackup: info COMPRESS_SUFFIX=.gz
sendbackup: info end
? [2004/01/11 03:03:45, 0] libsmb/clientgen.c:cli_receive_smb(121)
?   SMB Signature verification failed on incoming packet!
? [2004/01/11 03:03:45, 0] client/clitar.c:do_atar(698)
?   Error reading file \home\faculty\joes\data\data20011126.zip : Server
packet had invalid SMB signature!
[snip]

...and basically, lots of errors that indicate that Kerberos
authentication failed.  I have two guesses:

1.  smbclient was missing the -k to tell it to use kerberos auth
(unfortunately, the smbclient command got truncated in the log so I
can't tell for sure)
2.  my kerberos ticket that I got during testing when I ran kinit may
have expired

Does anyone know what the cause could be and a possible fix?  Is there a
way to specify the flags that should be passed to smbclient?

Thanks,
Fran

-- 

Fran Fabrizio
Senior Systems Analyst
Department of Computer and Information Sciences
University of Alabama - Birmingham
fran AT cis.uab DOT edu
(205) 934-0653


<Prev in Thread] Current Thread [Next in Thread>