[Samba] Cannot authenticate the administrator account (solved)

[L.P.H. van Belle]

why... uhmm if im correct.. 
 
i'll try to explain. . my english is not that good..  ;-) 
 
Your kerberos request =>  Resolving => resolving order, ( hosts files => DNS ) 
because of the hostfile, the server reports ip 127.0.0.1 for your hostname. ( from hosts ) 
But the correct one ( and the kerberosserver knows the correct ip ) is your other ip. 
kerberes need A and PTR record to be able to authenticate, and i thinks because of this, it fails. 
Hard to explain for me in english, so if im somewhere unclear, correct me 
 
so never set the the "localhost ip adres "  for the same hostname.. 
 
but good to know that the message :

kinit: Preauthentication failed while getting initial credentials

can be a resolving problem. 
 
Greetz, 
 
Louis
 
 

Van: Mike [mailto:1100100 at gmail.com] 
Verzonden: donderdag 30 april 2015 16:57
Aan: L.P.H. van Belle
CC: samba at lists.samba.org
Onderwerp: Re: [Samba] Cannot authenticate the administrator account





On Thu, Apr 30, 2015 at 10:41 AM, L.P.H. van Belle <belle at bazuin.nl> wrote:

Hai Mike,

in /etc/hosts
remove the line :
127.0.0.1       dc1.internal.example.com    dc1

and try again.

Greetz,

Louis




Perfect. Works!  :-)

I'll ask the question -- Why does domain pointer to localhost ip throw off access to the kerberos database?


Mike