[Samba] Kerberos kinit not running

[Maurizio Caloro]

 > If you run 'hostname -d', does it return 'testad.caloro.m' ?
root at testad:# hostname -d
Caloro.m

i need to beginn from scratch??

root at testad:/home/maurizio# samba-tool testparm
INFO 2022-07-21 18:59:51,713 pid:746 
/usr/lib/python3/dist-packages/samba/netcmd/testparm.py #96: Loaded smb 
config files from /etc/samba/smb.conf
INFO 2022-07-21 18:59:51,713 pid:746 
/usr/lib/python3/dist-packages/samba/netcmd/testparm.py #97: Loaded 
services file OK.
Press enter to see a dump of your service definitions

# Global parameters
[global]
         netbios name = TESTAD
         realm = CALORO.M
         server role = active directory domain controller
         server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, 
drepl, winbindd, ntp_signd, kcc, dnsupdate
         winbind expand groups = 2
         workgroup = CALORO
         idmap_ldb:use rfc2307 = yes

[sysvol]
         path = /var/lib/samba/sysvol
         read only = No

[netlogon]
         path = /var/lib/samba/sysvol/testad.caloro.m/scripts
         read only = No
root at testad:#

root at testad:/home/maurizio# cat /etc/bind/named.conf.options
options {
         directory "/var/cache/bind";

         recursion yes;
         forwarders { 8.8.8.8; };

         dnssec-enable no;
         dnssec-validation no;

         listen-on { any; };
         notify no;
         auth-nxdomain yes;
         empty-zones-enable no;
         minimal-responses yes;

         // https://wiki.samba.org/index.php/Dns-backend_bind
         tkey-gssapi-keytab "/var/lib/samba/bind-dns/dns.keytab";
};


root at testad:/home/maurizio# kinit Administrator
kinit: Cannot find KDC for realm "CALORO.M" while getting initial 
credentials

root at testad:/home/maurizio# kinit Administrator at CALORO.M
kinit: Cannot find KDC for realm "CALORO.M" while getting initial 
credentials


thansk for possible help


Am 21.07.2022 um 10:24 schrieb Rowland Penny via samba:
> On Wed, 2022-07-20 at 23:18 +0200, Maurizio Caloro via samba wrote:
>> root at TestAD:/home/maurizio# samba-tool testparm
>> INFO 2022-07-20 22:05:23,177 pid:846
>> /usr/lib/python3/dist-packages/samba/netcmd/testparm.py #96: Loaded
>> smb
>> config files from /etc/samba/smb.conf
>> INFO 2022-07-20 22:05:23,178 pid:846
>> /usr/lib/python3/dist-packages/samba/netcmd/testparm.py #97: Loaded
>> services file OK.
>> Press enter to see a dump of your service definitions
>>
>> # Global parameters
>> [global]
>>           netbios name = TESTAD
>>           realm = CALORO.M
>>           server role = active directory domain controller
>>           server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
>> drepl, winbindd, ntp_signd, kcc, dnsupdate
>>           winbind expand groups = 2
>>           workgroup = CALORO
>>           idmap_ldb:use rfc2307 = yes
>>
>> [sysvol]
>>           path = /var/lib/samba/sysvol
>>           read only = No
>>
>> [netlogon]
>>           path = /var/lib/samba/sysvol/testad.caloro.m/scripts
> If you run 'hostname -d', does it return 'testad.caloro.m' ?
>
>> --
>>
>> root at TestAD:/etc/bind# cat named.conf.options
> Try this version:
>
> options {
>      directory "/var/cache/bind";
>
>      recursion yes;
>      forwarders {
>              8.8.8.8;
>      };
>   
>      dnssec-enable no;
>      dnssec-validation no;
>   
>      listen-on { any; };
>      notify no;
>      auth-nxdomain yes;
>      empty-zones-enable no;
>      minimal-responses yes;
>      // https://wiki.samba.org/index.php/Dns-backend_bind
>      tkey-gssapi-keytab "/var/lib/samba/bind-dns/dns.keytab";
> };
>
> Rowland
>
>
>