samba - Oct 2016 - samba 4.5.0 strange windows 10 issue | incorrect password

hi server role is

server role = active directory domain controller

i googled the error and it says that there could be two computer accounts of
the same name

i pulled this from the event log

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server
50wks19$. The target name used was 50WKS19$. This indicates that the target
server failed to decrypt the ticket provided by the client. This can occur
when the target server principal name (SPN) is registered on an account
other than the account the target service is using. Ensure that the target
SPN is only registered on the account used by the server. This error can
also happen if the target service account password is different than what is
configured on the Kerberos Key Distribution Center for that target service.
Ensure that the service on the server and the KDC are both configured to use
the same password. If the server name is not fully qualified, and the target
domain (WMPNY.LAN) is different from the client domain (WMPNY.LAN), check if
there are identically named server accounts in these two domains, or use the
fully-qualified name to identify the server.

but checking DNS/ADUC i don't see any 50wks19 twice. all are windows 10x64



--
View this message in context:
http://samba.2283325.n4.nabble.com/samba-4-5-0-strange-windows-10-issue-incorrect-password-tp4709799p4709802.html
Sent from the Samba - General mailing list archive at Nabble.com.

On Mon, 17 Oct 2016 13:51:18 -0700 (PDT)
yabko via samba <samba at lists.samba.org> wrote:
> hi server role is
> 
> server role = active directory domain controller
> 
> i googled the error and it says that there could be two computer
> accounts of the same name
> 
> i pulled this from the event log
> 
> The Kerberos client received a KRB_AP_ERR_MODIFIED error from the
> server 50wks19$. The target name used was 50WKS19$. This indicates
> that the target server failed to decrypt the ticket provided by the
> client. This can occur when the target server principal name (SPN) is
> registered on an account other than the account the target service is
> using. Ensure that the target SPN is only registered on the account
> used by the server. This error can also happen if the target service
> account password is different than what is configured on the Kerberos
> Key Distribution Center for that target service. Ensure that the
> service on the server and the KDC are both configured to use the same
> password. If the server name is not fully qualified, and the target
> domain (WMPNY.LAN) is different from the client domain (WMPNY.LAN),
> check if there are identically named server accounts in these two
> domains, or use the fully-qualified name to identify the server.
> 
> but checking DNS/ADUC i don't see any 50wks19 twice. all are windows
> 10x64
> 
Well, all I gained from that is you haven't got a PDC, it is an AD DC.

What OS are you using ?
What is in smb.conf ?
What is in /etc/krb5.conf ?
what is in /etc/resolv.conf ?
what is in /etc/hosts ?
what is in /etc/hostname ?
what is the ipaddress of the AD DC ?

Rowland

Well, all I gained from that is you haven't got a PDC, it is an AD DC.

What OS are you using ?
What is in smb.conf ?
What is in /etc/krb5.conf ?
what is in /etc/resolv.conf ?
what is in /etc/hosts ?
what is in /etc/hostname ?
what is the ipaddress of the AD DC ?

Rowland

-------------------

Rowland yes it's ADDC the hostname is just PDC. Sorry for the confusion

The server is

Description:    Debian GNU/Linux 6.0.6 (squeeze)
Release:        6.0.6
Codename:       squeeze

/etc/krb5.conf
[libdefaults]
        default_realm = WMPNY.LAN
        dns_lookup_realm = false
        dns_lookup_kdc = true

/etc/resolv.conf

search wmpny.lan
domain wmpny.lan
nameserver 10.18.66.5

/etc/hosts
127.0.0.1       localhost
127.0.1.1       pdc.wmpny.local pdc

/etc/hostname
pdc

ip address is 10.18.66.5



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba





--
View this message in context:
http://samba.2283325.n4.nabble.com/samba-4-5-0-strange-windows-10-issue-incorrect-password-tp4709799p4709807.html
Sent from the Samba - General mailing list archive at Nabble.com.