[Samba] Cannot authenticate the administrator account (solved)

L.P.H. van Belle belle at bazuin.nl
Fri May 1 00:03:33 MDT 2015

why... uhmm if im correct.. 
i'll try to explain. . my english is not that good..  ;-) 
Your kerberos request =>  Resolving => resolving order, ( hosts files => DNS ) 
because of the hostfile, the server reports ip for your hostname. ( from hosts ) 
But the correct one ( and the kerberosserver knows the correct ip ) is your other ip. 
kerberes need A and PTR record to be able to authenticate, and i thinks because of this, it fails. 
Hard to explain for me in english, so if im somewhere unclear, correct me 
so never set the the "localhost ip adres "  for the same hostname.. 
but good to know that the message :

kinit: Preauthentication failed while getting initial credentials

can be a resolving problem. 

Van: Mike [mailto:1100100 at gmail.com] 
Verzonden: donderdag 30 april 2015 16:57
Aan: L.P.H. van Belle
CC: samba at lists.samba.org
Onderwerp: Re: [Samba] Cannot authenticate the administrator account

On Thu, Apr 30, 2015 at 10:41 AM, L.P.H. van Belle <belle at bazuin.nl> wrote:

Hai Mike,

in /etc/hosts
remove the line :       dc1.internal.example.com    dc1

and try again.



Perfect. Works!  :-)

I'll ask the question -- Why does domain pointer to localhost ip throw off access to the kerberos database?


More information about the samba mailing list