I recently got a Raspberry Pi Zero W, and Ubuntu Server wasn’t available for it since it used ARMv6, so I went back to ArchLinux ARM for this project. The goal was to move my motion sensing camera setup to the Zero W and use the Raspberry Pi 3 for something else.
First, to connect to Active Directory I followed a different path than last time (since I was running into more issues with SSSD than I expected). The Arch wiki was a great place to get started with. In my case, I had to tweak the
/etc/krb5.conf file a bit:
dns_lookup_realm = false dns_lookup_kdc = true rdns = false ignore_acceptor_hostname = true
/etc/samba/smb.conf I also had some issues with the suggested
idmap config * : backend = rid and had to substitute in the short name for the realm. For good measure, I also added my FQDNs to the
/etc/hosts file but that should have not been necessary (I think).
The rest went mostly smoothly, and then came the time to mount some shares using Kerberos. Using
autofs, specify the following share:
recording -fstype=cifs,rw,noperm,sec=krb5,vers=2.0 ://SERVER/SHARE
This is where it got ugly. On my file server, the shares are configured to use encryption, but for some dumb reason CIFS doesn’t support that yet and you’ll get the following error message:
CIFS VFS: Encrypted shares not supported…