[Samba] Cannot authenticate the administrator account

[Sketch]

On Wed, 29 Apr 2015, Andrey Repin wrote:

> Greetings, Sketch!
>
>>> workgroup = INTERNAL
>>> realm = EXAMPLE.COM
>>> netbios name = SAMBA
>
>> Looks that way to me.  Your realm should include the workgroup name:
>> INTERNAL.EXAMPLE.COM.
>
> Nothing is "SHOULD" as long as the settings follow basic requirements
> (single-label NETBIOS domain name, resolvable REALM name).
> I.e. I have domains provisioned with "ADS.<netbios domain name>.<tld>"
> All works fine, given correct DNS configuration.

Netbios name is basically irrelevant here.  Do you mean that the realm 
name does not have to match the workgroup name?