[Samba] Authentication problem

[Rowland penny]

On 29/06/16 11:27, Dr. Harry Knitter wrote:
> Am Mittwoch, 29. Juni 2016, 10:56:02 schrieb Rowland penny:
>> On 29/06/16 10:33, Dr. Harry Knitter wrote:
>>> I'm setting up a new Samba 4 Domain on a Debian Jessie machine.
>>> The dc works.
>>> Now I'm trying to setup a fileserver following the samba wiki.
>>> winbind is running on both machines, getent and wbinfo show the users and
>>> groups of the domain.
>>>
>>> However, when I try
>>> net rpc rights list accounts -U"MYDOM\Administrator"
>>> Enter MYDOM\Administrator's password:
>>> Could not connect to server 127.0.0.1
>>> The username or password was not correct.
>>> Connection failed: NT_STATUS_LOGON_FAILURE
>>>
>>> What's wrong?
>>>
>>>
>>> Greetings
>>> Harry
>> Can you post /etc/resolv.conf and /etc/hosts from the domain member (or
>> as you call it, 'fileserver)
>>
>> Rowland
> Thanks for your quick reply.
>
> /etc/resolv.conf points to the dc as a nameserver
>
> search mydom.lan
> nameserver IP.of.my.dc
>
> /etc/hosts
> 127.0.0.1	localhost
> xxx.xxx.xxx.xxx	fs.mydom.lan	fs
>
> # The following lines are desirable for IPv6 capable hosts
> ::1     localhost ip6-localhost ip6-loopback
> ff02::1 ip6-allnodes
> ff02::2 ip6-allrouters
>
> The IPs are correct
>
> Harry
>
>
>

Nothing seems wrong there, my setup is similar (dhcp instead of your 
fixed ip) and when I run your command, I get this:

rowland at devstation:~/programming/git/samba-master$ net rpc rights list 
accounts -U"SAMDOM\Administrator"
Enter SAMDOM\Administrator's password:
BUILTIN\Print Operators
No privileges assigned
..........................
...............
....

I take it the fileserver is joined to the domain, so what is in 
/etc/krb5.conf ?
Is a firewall running ?
What is in your smb.conf files, on the DC and fileserver ?

Rowland