From Fedora Project Wiki

(Created page with "{{QA/Test_Case |description=Use Files to access SMB shares using active kerberos ticket |setup= # If you are linked to your Active Directory domain via VPN, then this Test cas...")
 
No edit summary
Line 29: Line 29:
== Troubleshooting ==
== Troubleshooting ==


If the above explodes, try to log in from a VT console, and see if there is any interesting output there.
If you get password prompt or any kind of error during login, verify that console smbclient fails the same way. Use the following command to get interactive commandline access:
<pre>
$ smbclient -k -U testuser '\\server\share\'
</pre>
Type <code>quit</code> to quit smbclient.
If smbclient login works, please file a bug against gvfs, otherwise please check server configuration.
 
For hardcore debugging, use the following command to get gvfsd-smb messages and attach them to the bugreport please:
<pre>
$ GVFS_DEBUG=1 GVFS_SMB_DEBUG=99 /usr/libexec/gvfsd -r
</pre>


If you are connected to your domain controller via VPN, the above test case will not work.


[[Category:Active_Directory_Test_Cases]]
[[Category:Active_Directory_Test_Cases]]

Revision as of 15:37, 17 October 2012

Description

Use Files to access SMB shares using active kerberos ticket

Setup

  1. If you are linked to your Active Directory domain via VPN, then this Test case will not work.
  2. Verify that your Active Directory domain access works. If you don't have an Active Directory domain, you can set one up.
  3. Run through the test case to join the domain.
  4. Obtain kerberos ticket either using Online Accounts or manually via kinit (see the test case with no krb5.conf)
  5. Verify having active kerberos ticket by calling klist -e
  6. Setup file sharing on the Windows machine, e.g follow these steps for Windows 2008 Server:
    1. Run Windows Explorer
    2. Create a folder somewhere (e.g. C:\testfolder)
    3. Create a test file in that folder (e.g. C:\testfolder\testfile.txt)
    4. Go in the parent directory, right click on the folder, select Share with -> Specific people...
    5. Use "Find people..." combo box item to specify users you want to grant access
    6. Set Read/Write permissions for the added user
    7. Click the Share button, notice the share address when operation completes

How to test

  1. In Gnome session, open Files (Nautilus)
  2. Navigate to the Windows share, either using Connect to Server dialog or manually by entering URI in the following format: 
    smb://server/share/
  3. Test if you can read (and write if you allowed it on the server) various files, performing standard file management tasks

Expected Results

  1. No password prompt should be presented, GVfs should automatically pick active kerberos ticket.



Troubleshooting

If you get password prompt or any kind of error during login, verify that console smbclient fails the same way. Use the following command to get interactive commandline access: 

$ smbclient -k -U testuser '\\server\share\'

Type quit to quit smbclient. If smbclient login works, please file a bug against gvfs, otherwise please check server configuration.

For hardcore debugging, use the following command to get gvfsd-smb messages and attach them to the bugreport please: 

$ GVFS_DEBUG=1 GVFS_SMB_DEBUG=99 /usr/libexec/gvfsd -r
Retrieved from "https://fedoraproject.org/w/index.php?title=QA:Testcase_Active_Directory_gvfs&oldid=307422"