From Fedora Project Wiki
Description
Use Files to access SMB shares using active kerberos ticket
Setup
- If you are linked to your Active Directory domain via VPN, then this Test case will not work.
- Verify that your Active Directory domain access works. If you don't have an Active Directory domain, you can set one up.
- Run through the test case to join the domain.
- Obtain kerberos ticket either using Online Accounts or manually via kinit (see the test case with no krb5.conf)
- Verify having active kerberos ticket by calling
klist -e
- Setup file sharing on the Windows machine, e.g follow these steps for Windows 2008 Server:
- Run Windows Explorer
- Create a folder somewhere (e.g. C:\testfolder)
- Create a test file in that folder (e.g. C:\testfolder\testfile.txt)
- Go in the parent directory, right click on the folder, select Share with -> Specific people...
- Use "Find people..." combo box item to specify users you want to grant access
- Set Read/Write permissions for the added user
- Click the Share button, notice the share address when operation completes
How to test
- In Gnome session, open Files (Nautilus)
- Navigate to the Windows share, either using Connect to Server dialog or manually by entering URI in the following format:
smb://server/share/
- Test if you can read (and write if you allowed it on the server) various files, performing standard file management tasks
Expected Results
- No password prompt should be presented, GVfs should automatically pick active kerberos ticket.
Troubleshooting
If the above explodes, try to log in from a VT console, and see if there is any interesting output there.
If you are connected to your domain controller via VPN, the above test case will not work.