HP CIFS Server and Kerberos

102
8.2 Common Problems
HP CIFS Server A.02.01, based upon Samba 3.0 with Kerberos authentication, has been available
since December 15
th
, 2004. Most of the common problems that are identified below have been
observed in testing done by various internal HP organizations. Some have originated at customer
sites. This is not an exhaustive list.
Always ensure that an HP-UX kinit is successful before addressing Samba configurations.
The underlying HP-UX Kerberos authentication must be working correctly, or Samba will
not work with it.
Many of the common problems will exhibit the exact same symptom – the bad-password popup:
The expected behavior is that when the user maps a share, the operation completes normally and the
file explorer for that share is displayed. Using Kerberos, the user does not have to enter a password
because the client obtains a ticket for the CIFS service from the KDC, and presents it to the CIFS
Server, and the authentication is completed. When the authentication fails, the user-password dialog
box is displayed for the user to try again. This failure can occur from a multitude of problems, but the
symptom is the same. For simplicity, this symptom will be referred to as the “bad-password pop-up.”