Adbindproxy Limitations

The following sections describe common limitations associated with the DirectControl for Samba.

The Adbindproxy release notes formally listed this information under the title 'Known Issues'.

• Limitations with stock Samba

  In previous releases of DirectControl for Samba, we modified the following in stock Samba for interoperability. Using stock Samba instead of Delinea Samba, you may see related issues.

  • Default Kerberos keytab location, KEYTAB_DEFAULT, from /etc/krb5.keytab to /etc/krb5/krb5.keytab on Solaris (SAMBA-890).
  • Default Kerberos cache location, CCNAME, from /tmp/krb5cc_%{uid} to /var/krb5/security/creds/krb5cc_%{uid}" on AIX (SAMBA-892).

• Limitations with RHEL 7.2 PPC (SAMBA-965)

  If you are using 64bit Samba on a RHEL 7.2 PPC machine, you may have problem with adclient failed to use the 64bit tdb library come with 64 bit Samba. The symptom can be shown in the error message while trying to access samba server - “session setup failed: NT_STATUS_CANT_ACCESS_DOMAIN_INFO”.

  You need to install a 32bit tdb library, such as libtdb-1.3.6-2.el7.ppc.rpm in rhel-server-7.2-ppc64-dvd.iso, for adclient to work with, and you need to tell adclient where to get this library by adding a parameter “samba.libtdb.path: /usr/lib/libtdb.so.1” into centrifydc.conf, assuming the path to libtdb is /usr/lib/libtdb.so.1.