[Samba] Samba on Debian 8; NT4 domain, win10

[Rowland Penny]

On Thu, 1 Dec 2016 15:15:18 +0100
"Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:

> Am 2016-12-01 um 13:19 schrieb Rowland Penny via samba:
> 
> > You should have seen a line like this towards to the end of the
> > upgrade:
> > 
> > Administrator password has been set to password of user 
> > 
> > But it is usually the 'root' user password.
> 
> Ah, yes, I should have remembered reading that.
> Unfortunately it isn't working for me, yet.
> 
> in my test VM
> 
> I rm-ed /var/lib/samba/private/*
> 
> explicitly set passwd for root again
> 
> re-ran classicupgrade
> 
> ln -sf /var/lib/samba/private/krb5.conf /etc/krb5.conf
> 
> and kinit fails for me:
> 
> # kinit  Administrator at my.tld
> kinit: Cannot find KDC for realm "my.tld" while getting initial
> credentials
> 
> -
> 
> krb5.conf only contains:
> 
> # cat /etc/krb5.conf
> [libdefaults]
> 	default_realm = MY.TLD
> 	dns_lookup_realm = false
> 	dns_lookup_kdc = true
> 
> ?

Yes, that is all you need (to be honest, you only need the first and
second lines )

If I do this on a domain member it works:

kinit administrator
Password for administrator at SAMDOM.EXAMPLE.COM: 

klist
Ticket cache: FILE:/tmp/krb5cc_10000_EyqmGz
Default principal: administrator at SAMDOM.EXAMPLE.COM

Valid starting     Expires            Service principal
01/12/16 14:39:13  02/12/16 00:39:13  krbtgt/SAMDOM.EXAMPLE.COM at SAMDOM.EXAMPLE.COM
	renew until 02/12/16 14:39:04

and on a DC:

kinit administrator
Password for administrator at SAMDOM.EXAMPLE.COM: 

klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administrator at SAMDOM.EXAMPLE.COM

Valid starting     Expires            Service principal
01/12/16 14:42:45  02/12/16 00:42:45  krbtgt/SAMDOM.EXAMPLE.COM at SAMDOM.EXAMPLE.COM
	renew until 02/12/16 14:42:39
 
Have you altered /etc/resolv.conf, on the DC, to use its own ip as the
first nameserver ?
 
Rowland