[Samba] kerberos_kinit_password failed: Preauthentication failed

[Rowland Penny]

On Sun, 8 Jan 2017 20:04:41 -0200
"Carlos A. P. Cunha" <carlos.hollow at gmail.com> wrote:

> Hello!
> 
> My smb.conf
> 
> [global]
>          workgroup = <DOMAIN>
>          realm = <SUBDOMAIN.DOMAIN.COM.BR>
> 
>          security = ADS
>          idmap config * : backend = rid
>          idmap config * : range = 100000-999999
> 
>          client schannel = no
>          allow trusted domains = yes
>          winbind use default domain = yes
>          winbind refresh tickets = Yes
>          winbind offline logon = no
>          winbind cache time = 60
>          winbind enum users  = yes
>          winbind enum groups = yes
>          template shell = /bin/bash
>          template homedir = /home/%U
> 
>          vfs objects = acl_xattr
>          map acl inherit = yes
>          store dos attributes = yes
> 

OK, are you using sssd ?, If you are this isn't a Samba problem, or
are you trying to run the Samba AD DC as a subdomain of another
domain ? If you are, sorry but it doesn't (yet) work.

Rowland