[Samba] Cannot authenticate the administrator account (solved)
L.P.H. van Belle
belle at bazuin.nl
Fri May 1 00:03:33 MDT 2015
why... uhmm if im correct..
i'll try to explain. . my english is not that good.. ;-)
Your kerberos request => Resolving => resolving order, ( hosts files => DNS )
because of the hostfile, the server reports ip 127.0.0.1 for your hostname. ( from hosts )
But the correct one ( and the kerberosserver knows the correct ip ) is your other ip.
kerberes need A and PTR record to be able to authenticate, and i thinks because of this, it fails.
Hard to explain for me in english, so if im somewhere unclear, correct me
so never set the the "localhost ip adres " for the same hostname..
but good to know that the message :
kinit: Preauthentication failed while getting initial credentials
can be a resolving problem.
Van: Mike [mailto:1100100 at gmail.com]
Verzonden: donderdag 30 april 2015 16:57
Aan: L.P.H. van Belle
CC: samba at lists.samba.org
Onderwerp: Re: [Samba] Cannot authenticate the administrator account
On Thu, Apr 30, 2015 at 10:41 AM, L.P.H. van Belle <belle at bazuin.nl> wrote:
remove the line :
127.0.0.1 dc1.internal.example.com dc1
and try again.
Perfect. Works! :-)
I'll ask the question -- Why does domain pointer to localhost ip throw off access to the kerberos database?
More information about the samba