[Samba] Cannot authenticate the administrator account

[L.P.H. van Belle]

Are you sure you have the "correct" administrator password .. 
 
this should work ,  echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls'
that does not involve kerberos yet.. 
 
Please run: 
 
SETHOSTNAME=`hostname -s`
SETDNSDOMAIN=`hostname -d`
SETFQDN=`hostname -f`

host -t SRV _ldap._tcp.${SETDNSDOMAIN}. 

host -t SRV _kerberos._udp.${SETDNSDOMAIN}.
  
host -t A ${SETHOSTNAME}.${SETDNSDOMAIN}. 

and 
cat /etc/hosts
 
and these are your DC's ips? 
 
nameserver 75.75.76.76
nameserver 75.75.75.75

 
Greetz, 
 
Louis
 



 
Van: Mike [mailto:1100100 at gmail.com] 
Verzonden: woensdag 22 april 2015 15:45
Aan: L.P.H. van Belle
CC: samba at lists.samba.org
Onderwerp: Re: [Samba] Cannot authenticate the administrator account




On Wed, Apr 22, 2015 at 7:27 AM, L.P.H. van Belle <belle at bazuin.nl> wrote:
can you try the following..
and post the result back.
and /etc/resolv.conf
and /etc/krb5.conf

copy past it, but set the admin pass fist.
then whats the output.

SAMBA_NT_ADMIN_PASS="PUT_YOUR-ADMINISTRATOR_PASSWORD_HERE"
SETFQDN=`hostname -f`

echo "NT Authentication test"
echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls'

echo "Kerberos Authentication"
echo ${SAMBA_NT_ADMIN_PASS} | kinit Administrator
smbclient //${SETFQDN}/netlogon -U Administrator -c 'ls' -k
kdestroy


[root at a10 ~]# cat /etc/resolv.conf
# Generated by NetworkManager
search conpago.mwllc.info
nameserver 75.75.76.76
nameserver 75.75.75.75
[root at a10 etc]# cat krb5.conf
[libdefaults]
    default_realm = MWLLC.INFO
    dns_lookup_realm = false
    dns_lookup_kdc = true


[root at a10 etc]# SETFQDN=`hostname -f`
[root at a10 etc]# echo "NT Authentication test"
NT Authentication test
[root at a10 etc]# echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls'
Enter Administrator's password: 
session setup failed: NT_STATUS_LOGON_FAILURE
[root at a10 etc]# echo "Kerberos Authentication"
Kerberos Authentication
[root at a10 etc]# echo ${SAMBA_NT_ADMIN_PASS} | kinit Administrator
kinit: Cannot find KDC for realm "MWLLC.INFO" while getting initial credentials
[root at a10 etc]# smbclient //${SETFQDN}/netlogon -U Administrator -c 'ls' -k
cli_session_setup_kerberos: spnego_gen_krb5_negTokenInit failed: No such file or directory
session setup failed: NT_STATUS_UNSUCCESSFUL
[root at a10 etc]# kdestroy