[Samba] smbclient //server/netlogon -k -c 'ls' fails with "NT_STATUS_LOGON_FAILURE"

[Rowland Penny]

On Mon, 26 Feb 2018 12:27:56 +0200
Arcadie Cracan <arcadiec at gmail.com> wrote:

> Dear Rowland,
> 
> I have commented out the 'idmap config' options, nothing changed.
> Here are my bind9 configs:
> 
> /etc/bind/named.conf:

Nothing wrong there

> 
> /etc/bind/named.conf.options:
> options {
>         directory "/var/cache/bind";
>         recursion yes;
>         allow-query { goodclients; };
>         tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";
>         tkey-domain "INTRA.DAM-APPLICATION.RO";
> 
>         forwarders {
>                 213.154.124.1;
>                 193.231.252.1;
>         };
> 
>         dnssec-enable yes;
>         dnssec-validation yes;

I have this instead:

        dnssec-validation no;
        dnssec-enable no;
        dnssec-lookaside no;

> 
>         auth-nxdomain no;    # conform to RFC1035
>         listen-on-v6 { none; };
> };
> 
> /etc/bind/named.conf.default-zones:

Nothing wrong there

> 
> 
> /var/lib/samba/private/named.conf:

Nothing wrong there

Is Apparmor running or is a firewall running ?

Rowland