Ok, but you changed your hosts file :-p You removed 127.0.1.1 .. .. So now then, whats wrong here...>/etc/resolv.conf points to the dc as a nameserver > >search mydom.lan >nameserver IP.of.my.dc > >/etc/hosts >127.0.0.1 localhost >xxx.xxx.xxx.xxx fs.mydom.lan fs > ># The following lines are desirable for IPv6 capable hosts >::1 localhost ip6-localhost ip6-loopback >ff02::1 ip6-allnodes >ff02::2 ip6-allroutersNothing in my opinion. So a new big mistry.. Why does : net rpc rights list accounts -U"MYDOM\Administrator" work with dhcp and a /etc/hosts with only 127.0.0.1 in it. and why does a server with static ip errors net rpc rights list accounts -U"MYDOM\Administrator" Enter MYDOM\Administrator's password: Could not connect to server 127.0.0.1 The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE While net rpc rights list accounts -U"MYDOM\Administrator" -S ADDC.MYDOMAIN.TLD work. A ping ADDC.MYDOMAIN.TLD works also. And a correct krb5.conf. cat /etc/krb5.conf [libdefaults] default_realm = ROTTERDAM.BAZUIN.NL dns_lookup_kdc = true and kinit Administrator works also.. Rowland can you show me your /etc/dhcp/dhclient.conf, and the result of the dhcp client. /var/lib/dhcp/dhclient.leases Can you try this again and add this to your hosts file.># The following lines are desirable for IPv6 capable hosts >::1 localhost ip6-localhost ip6-loopback >ff02::1 ip6-allnodes >ff02::2 ip6-allroutersAnd try it again also, lets see what happens.. I dont now whats the difference here. You know my setup but i have/had the same as the topic starter. Greetz, Louis> -----Oorspronkelijk bericht----- > > Cannot agree with you Louis, AD relies on DNS and as such, the net > command should be able to find the DC by dns. > > My /etc/resolv.conf searches the domain and uses the DCs as nameservers, > all there is in /etc/hosts (apart from ipv6 lines) is > > 127.0.0.1 localhost > > When I run the same command as the OP (just changing the domain) it > works for me. I would still be interested in seeing the info I last > asked for. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
Check in your smb.conf of your file servers for: interfaces bind interfaces only = Could be a reason you cannot connect. Greetings Daniel EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 Email: mueller at tropenklinik.de www.tropenklinik.de www.bauen-sie-mit.tropenklinik.de -----Ursprüngliche Nachricht----- Von: L.P.H. van Belle [mailto:belle at bazuin.nl] Gesendet: Mittwoch, 29. Juni 2016 14:56 An: samba at lists.samba.org Betreff: [SPAMVERDACHT] Re: [Samba] Authentication problem Ok, but you changed your hosts file :-p You removed 127.0.1.1 .. .. So now then, whats wrong here...>/etc/resolv.conf points to the dc as a nameserver > >search mydom.lan >nameserver IP.of.my.dc > >/etc/hosts >127.0.0.1 localhost >xxx.xxx.xxx.xxx fs.mydom.lan fs > ># The following lines are desirable for IPv6 capable hosts >::1 localhost ip6-localhost ip6-loopback >ff02::1 ip6-allnodes >ff02::2 ip6-allroutersNothing in my opinion. So a new big mistry.. Why does : net rpc rights list accounts -U"MYDOM\Administrator" work with dhcp and a /etc/hosts with only 127.0.0.1 in it. and why does a server with static ip errors net rpc rights list accounts -U"MYDOM\Administrator" Enter MYDOM\Administrator's password: Could not connect to server 127.0.0.1 The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE While net rpc rights list accounts -U"MYDOM\Administrator" -S ADDC.MYDOMAIN.TLD work. A ping ADDC.MYDOMAIN.TLD works also. And a correct krb5.conf. cat /etc/krb5.conf [libdefaults] default_realm = ROTTERDAM.BAZUIN.NL dns_lookup_kdc = true and kinit Administrator works also.. Rowland can you show me your /etc/dhcp/dhclient.conf, and the result of the dhcp client. /var/lib/dhcp/dhclient.leases Can you try this again and add this to your hosts file.># The following lines are desirable for IPv6 capable hosts >::1 localhost ip6-localhost ip6-loopback >ff02::1 ip6-allnodes >ff02::2 ip6-allroutersAnd try it again also, lets see what happens.. I dont now whats the difference here. You know my setup but i have/had the same as the topic starter. Greetz, Louis> -----Oorspronkelijk bericht----- > > Cannot agree with you Louis, AD relies on DNS and as such, the net > command should be able to find the DC by dns. > > My /etc/resolv.conf searches the domain and uses the DCs as > nameservers, all there is in /etc/hosts (apart from ipv6 lines) is > > 127.0.0.1 localhost > > When I run the same command as the OP (just changing the domain) it > works for me. I would still be interested in seeing the info I last > asked for. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Good point Daniel, thanks. Worth a try. I am using : interfaces = 192.168.0.21 127.0.0.1 bind interfaces only = yes Rowland, are u using these too? And you Harry? Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Mueller > Verzonden: woensdag 29 juni 2016 15:37 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] [SPAMVERDACHT] Re: Authentication problem > > Check in your smb.conf of your file servers for: > > interfaces > bind interfaces only > > Could be a reason you cannot connect. > > Greetings > > Daniel > > > > EDV Daniel Müller > > Leitung EDV > Tropenklinik Paul-Lechler-Krankenhaus > Paul-Lechler-Str. 24 > 72076 Tübingen > Tel.: 07071/206-463, Fax: 07071/206-499 > Email: mueller at tropenklinik.de > www.tropenklinik.de > www.bauen-sie-mit.tropenklinik.de > > > > > -----Ursprüngliche Nachricht----- > Von: L.P.H. van Belle [mailto:belle at bazuin.nl] > Gesendet: Mittwoch, 29. Juni 2016 14:56 > An: samba at lists.samba.org > Betreff: [SPAMVERDACHT] Re: [Samba] Authentication problem > > Ok, but you changed your hosts file :-p > You removed 127.0.1.1 .. .. > > > So now then, whats wrong here... > > >/etc/resolv.conf points to the dc as a nameserver > > > >search mydom.lan > >nameserver IP.of.my.dc > > > >/etc/hosts > >127.0.0.1 localhost > >xxx.xxx.xxx.xxx fs.mydom.lan fs > > > ># The following lines are desirable for IPv6 capable hosts > >::1 localhost ip6-localhost ip6-loopback > >ff02::1 ip6-allnodes > >ff02::2 ip6-allrouters > > Nothing in my opinion. > > So a new big mistry.. > > Why does : > net rpc rights list accounts -U"MYDOM\Administrator" > work with dhcp and a /etc/hosts with only 127.0.0.1 in it. > > and why does a server with static ip errors net rpc rights list accounts - > U"MYDOM\Administrator" > Enter MYDOM\Administrator's password: > Could not connect to server 127.0.0.1 The username or password was not > correct. > Connection failed: NT_STATUS_LOGON_FAILURE > > While net rpc rights list accounts -U"MYDOM\Administrator" -S > ADDC.MYDOMAIN.TLD work. > > A ping ADDC.MYDOMAIN.TLD works also. > And a correct krb5.conf. > > cat /etc/krb5.conf > [libdefaults] > default_realm = ROTTERDAM.BAZUIN.NL > dns_lookup_kdc = true > > and kinit Administrator > works also.. > > > Rowland can you show me your /etc/dhcp/dhclient.conf, and the result of > the dhcp client. /var/lib/dhcp/dhclient.leases > > Can you try this again and add this to your hosts file. > ># The following lines are desirable for IPv6 capable hosts > >::1 localhost ip6-localhost ip6-loopback > >ff02::1 ip6-allnodes > >ff02::2 ip6-allrouters > > And try it again also, lets see what happens.. > I dont now whats the difference here. You know my setup but i have/had the > same as the topic starter. > > > Greetz, > > Louis > > > > > -----Oorspronkelijk bericht----- > > > > Cannot agree with you Louis, AD relies on DNS and as such, the net > > command should be able to find the DC by dns. > > > > My /etc/resolv.conf searches the domain and uses the DCs as > > nameservers, all there is in /etc/hosts (apart from ipv6 lines) is > > > > 127.0.0.1 localhost > > > > When I run the same command as the OP (just changing the domain) it > > works for me. I would still be interested in seeing the info I last > > asked for. > > > > Rowland > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
On 29/06/16 15:06, L.P.H. van Belle wrote:> Good point Daniel, thanks. Worth a try. > > I am using : > interfaces = 192.168.0.21 127.0.0.1 > bind interfaces only = yes > > Rowland, are u using these too? > And you Harry? > > Greetz, > > Louis >No, I am not using those lines. Rowland
Am Mittwoch, 29. Juni 2016, 16:06:19 schrieb L.P.H. van Belle:> Good point Daniel, thanks. Worth a try. > > I am using : > interfaces = 192.168.0.21 127.0.0.1 > bind interfaces only = yes > > Rowland, are u using these too? > And you Harry? > > Greetz, > > Louis >Hello Louis, I now have added interfaces = eth0 lo bind interfaces only = yes I wanted to avoid using the IPs for more flexibility. And ist works! net rpc rights list accounts -U"MYDOM\Administrator" does not complain any more Thanks and Greetings to all Harry -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 181 bytes Desc: This is a digitally signed message part. URL: <http://lists.samba.org/pipermail/samba/attachments/20160630/d44b39df/signature.sig>