samba - Jul 2014 - deleted krbtgt user

So I did a very dumb move and deleted the krbtgt user from my working 
samba4 installation. Now of course, this broke the installation... trying 
to fix things, I recreated the user (and made it member of the 
administrator group) which let me start samba4 again but now, whenever I 
try to log in a user on a workstation, in the logs it gives me the error 
"Kerberos: Principal may not act as server" 

Is there anything I can do to fix this or am I looking at a full reinstall 
of my DC? 

Thank you, 

David

wel i suggest, restore your backup.. ;-) 

or add kadmin/changepw to the new krbtgt user.

samba-tool spn list krbtgt 

User CN=krbtgt,CN=Users,...  

servicePrincipalName:
         kadmin/changepw

I don't know the samba-tool line, so thats for you to find. 
you can do this also from windows AD tool but you need to set View-Advanced
first,
after that you will see the krbtgt users in the Users OU. 


Louis

>-----Oorspronkelijk bericht-----
>Van: David at alcmedia.com [mailto:samba-bounces at lists.samba.org] 
>Namens David Bordeleau
>Verzonden: donderdag 10 juli 2014 0:53
>Aan: samba at lists.samba.org
>Onderwerp: [Samba] deleted krbtgt user
>
>
>
>So I did a very dumb move and deleted the krbtgt user from my working 
>samba4 installation. Now of course, this broke the 
>installation... trying 
>to fix things, I recreated the user (and made it member of the 
>administrator group) which let me start samba4 again but now, 
>whenever I 
>try to log in a user on a workstation, in the logs it gives me 
>the error 
>"Kerberos: Principal may not act as server" 
>
>Is there anything I can do to fix this or am I looking at a 
>full reinstall 
>of my DC? 
>
>Thank you, 
>
>David 
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>