search for: samba_nt_admin_pass

Are you sure you have the "correct" administrator password .. ? this should work ,? echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls' that does not involve kerberos yet.. ? Please run: ? SETHOSTNAME=`hostname -s` SETDNSDOMAIN=`hostname -d` SETFQDN=`hostname -f` host -t SRV _ldap._tcp.${SETDNSDOMAIN}. host -t SRV _kerberos._udp.${SETDNSDOMAIN}. ?? host -t A ${S...

...ege \ SeLoadDriverPrivilege SeCreatePagefilePrivilege \ SeIncreaseQuotaPrivilege SeChangeNotifyPrivilege SeUndockPrivilege \ SeManageVolumePrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege \ SeEnableDelegationPrivilege" samba-tool user setpassword Administrator \ --newpassword="$SAMBA_NT_ADMIN_PASS" echo "$SAMBA_NT_ADMIN_PASS" | kinit Administrator for priv in $PRIVS ; do while ! net rpc rights grant "${SAMBA_DC_ADMIN_GROUP_CHOICE}" $priv \ -U "Administrator%$SAMBA_NT_ADMIN_PASS" ; do echo "Failed to grant $priv ... Retrying ..."...

ahh. stupid me.. yes.. but this should have worked, with the correct pass.. echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls' Thanx for pointing me.. ;-) Greetz, Louis >-----Oorspronkelijk bericht----- >Van: rowlandpenny at googlemail.com >[mailto:samba-bounces at lists.samba.org] Namens Rowland Penny >Verzonden: woensdag 22 april 2015 17:...

On 22/04/15 15:04, L.P.H. van Belle wrote: > Are you sure you have the "correct" administrator password .. > > this should work , echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls' > that does not involve kerberos yet.. > > Please run: > > SETHOSTNAME=`hostname -s` > SETDNSDOMAIN=`hostname -d` > SETFQDN=`hostname -f` > > host -t SRV _ldap._tcp.${SETDNSDOMAIN}. > > host -t...

On 22/04/15 16:01, Rowland Penny wrote: > On 22/04/15 15:04, L.P.H. van Belle wrote: >> Are you sure you have the "correct" administrator password .. >> this should work , echo ${SAMBA_NT_ADMIN_PASS}| smbclient >> //localhost/netlogon -U Administrator -c 'ls' >> that does not involve kerberos yet.. >> Please run: >> SETHOSTNAME=`hostname -s` >> SETDNSDOMAIN=`hostname -d` >> SETFQDN=`hostname -f` >> >> host -t SRV _ldap._tcp.${SETDNSD...

...\ SeIncreaseQuotaPrivilege >> SeChangeNotifyPrivilege SeUndockPrivilege \ SeManageVolumePrivilege >> SeImpersonatePrivilege SeCreateGlobalPrivilege \ >> SeEnableDelegationPrivilege" >> >> samba-tool user setpassword Administrator \ >> --newpassword="$SAMBA_NT_ADMIN_PASS" >> echo "$SAMBA_NT_ADMIN_PASS" | kinit Administrator >> for priv in $PRIVS ; do >> while ! net rpc rights grant "${SAMBA_DC_ADMIN_GROUP_CHOICE}" $priv >> \ -U "Administrator%$SAMBA_NT_ADMIN_PASS" ; do >> echo "Failed to gr...

On Wed, Apr 22, 2015 at 11:09 AM, L.P.H. van Belle <belle at bazuin.nl> wrote: > but this should have worked, with the correct pass.. > echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U > Administrator -c 'ls' > > Something almost worked ---- [root at a10 ~]# echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls' Enter Administrator's password: Anonymous login successful Domain=[CONPAG...

...s is an old bug, which is handled by my scripts for some time now ;-) If you take this code and run it after install its fixed. ################################ #!/bin/bash SETDNSDOMAIN=`hostname -d` SETHOSTNAME=`hostname -s` BIND9_IP_ADDC=`hostname -i` SAMBA_NT_ADMIN="Administrator" SAMBA_NT_ADMIN_PASS="PUT_YOUR_ADMINISTRATOR_PASSWORD_HERE" ## the if the needed dns entries for kerberos are there. if [ -z "`host -t SRV _ldap._tcp.${SETDNSDOMAIN}. | grep 'not found'`" ]; then echo "testing of : host -t SRV _ldap._tcp.${SETDNSDOMAIN}. : ok" TEST1=0 e...

AD DC default shares are okay after provisioning - smbclient -L localhost -U%: Domain=[CONPAGO] OS=[Unix] Server=[Samba 4.1.17-SerNet-RedHat-11.el7] Sharename Type Comment --------- ---- ------- netlogon Disk sysvol Disk IPC$ IPC IPC Service (Samba 4.1.17-SerNet-RedHat-11.el7) Domain=[CONPAGO]

Hi Rowland, I have similar problem with sernet 4.2.4 package: no dns entry created and logs are showing NOTAUTH for dnsupdate Here is my work around: New DC joins domain with: --dns-backend=BIND9_DLZ and --server=partnerDC.contoso.com Don't start samba or bind yet !! After that I've to correct some permissions rights on these folders/files (bind can read): - private - dns - dns/* -

...CreatePagefilePrivilege \ SeIncreaseQuotaPrivilege > SeChangeNotifyPrivilege SeUndockPrivilege \ SeManageVolumePrivilege > SeImpersonatePrivilege SeCreateGlobalPrivilege \ > SeEnableDelegationPrivilege" > > samba-tool user setpassword Administrator \ > --newpassword="$SAMBA_NT_ADMIN_PASS" > echo "$SAMBA_NT_ADMIN_PASS" | kinit Administrator > for priv in $PRIVS ; do > while ! net rpc rights grant "${SAMBA_DC_ADMIN_GROUP_CHOICE}" $priv > \ -U "Administrator%$SAMBA_NT_ADMIN_PASS" ; do > echo "Failed to grant $priv ... Retryi...

...CreatePagefilePrivilege \ > SeIncreaseQuotaPrivilege SeChangeNotifyPrivilege SeUndockPrivilege \ > SeManageVolumePrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege \ > SeEnableDelegationPrivilege" > > samba-tool user setpassword Administrator \ > --newpassword="$SAMBA_NT_ADMIN_PASS" > echo "$SAMBA_NT_ADMIN_PASS" | kinit Administrator > for priv in $PRIVS ; do > while ! net rpc rights grant "${SAMBA_DC_ADMIN_GROUP_CHOICE}" $priv \ > -U "Administrator%$SAMBA_NT_ADMIN_PASS" ; do > echo "Failed to grant $pri...

...taPrivilege SeChangeNotifyPrivilege SeUndockPrivilege > >> \ SeManageVolumePrivilege SeImpersonatePrivilege > >> SeCreateGlobalPrivilege \ SeEnableDelegationPrivilege" > >> > >> samba-tool user setpassword Administrator \ > >> --newpassword="$SAMBA_NT_ADMIN_PASS" > >> echo "$SAMBA_NT_ADMIN_PASS" | kinit Administrator > >> for priv in $PRIVS ; do > >> while ! net rpc rights grant "${SAMBA_DC_ADMIN_GROUP_CHOICE}" > >> $priv \ -U "Administrator%$SAMBA_NT_ADMIN_PASS" ; do > >>...

...lege > SeUndockPrivilege > > >> \ SeManageVolumePrivilege SeImpersonatePrivilege > > >> SeCreateGlobalPrivilege \ SeEnableDelegationPrivilege" > > >> > > >> samba-tool user setpassword Administrator \ > > >> --newpassword="$SAMBA_NT_ADMIN_PASS" > > >> echo "$SAMBA_NT_ADMIN_PASS" | kinit Administrator > > >> for priv in $PRIVS ; do > > >> while ! net rpc rights grant "${SAMBA_DC_ADMIN_GROUP_CHOICE}" > > >> $priv \ -U "Administrator%$SAMBA_NT_ADMIN_PASS" ;...

...hangeNotifyPrivilege SeUndockPrivilege >>>> \ SeManageVolumePrivilege SeImpersonatePrivilege >>>> SeCreateGlobalPrivilege \ SeEnableDelegationPrivilege" >>>> >>>> samba-tool user setpassword Administrator \ >>>> --newpassword="$SAMBA_NT_ADMIN_PASS" >>>> echo "$SAMBA_NT_ADMIN_PASS" | kinit Administrator >>>> for priv in $PRIVS ; do >>>> while ! net rpc rights grant "${SAMBA_DC_ADMIN_GROUP_CHOICE}" >>>> $priv \ -U "Administrator%$SAMBA_NT_ADMIN_PASS" ; do >...

can you try this also copy past it, but set the admin pass fist. then whats the output. SAMBA_NT_ADMIN_PASS="PUT_YOUR-ADMINISTRATOR_PASSWORD_HERE" SETFQDN=`hostname -f` echo "NT Authentication test" echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls' echo "Kerberos Authentication" echo ${SAMBA_NT_ADMIN_PASS} | kinit Administrator sm...

Hi Marc, Am 19.03.2015 um 22:53 schrieb Marc Muehlfeld: > Am 19.03.2015 um 14:35 schrieb Nissl Reinhard: >> When I try to access share \\platon\root<file:///\\platon\root> as fee\administrator I get the following: >> >> platon:~ # smbclient -c dir -W fee -U administrator%secret //platon/root >> Domain=[FEE] OS=[Unix] Server=[Samba

...e attention too, out of five tries.) And, because I have two identical computers (one that will become DC1 and the other DC2) I switched machines, just to make sure it wasn't a hardware issue. It's not! When I run one of the failed script line manually, I get: root at dc01:~# echo ${SAMBA_NT_ADMIN_PASS}| net rpc rights grant "${SAMBA_NT_DOMAIN}Domain Admins" SeDiskOperatorPrivilege -UAdministrator Enter Administrator's password: Could not connect to server 127.0.0.1 The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE That might have failed...

can you try the following.. and post the result back. and /etc/resolv.conf and /etc/krb5.conf copy past it, but set the admin pass fist. then whats the output. SAMBA_NT_ADMIN_PASS="PUT_YOUR-ADMINISTRATOR_PASSWORD_HERE" SETFQDN=`hostname -f` echo "NT Authentication test" echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls' echo "Kerberos Authentication" echo ${SAMBA_NT_ADMIN_PASS} | kinit Administrator sm...

...aid close attention too, out of five tries.) And, because I have two identical computers (one that will become DC1 and the other DC2) I switched machines, just to make sure it wasn't a hardware issue. It's not! When I run one of the failed script line manually, I get: root at dc01:~# echo ${SAMBA_NT_ADMIN_PASS}| net rpc rights grant "${SAMBA_NT_DOMAIN}Domain Admins" SeDiskOperatorPrivilege -UAdministrator Enter Administrator's password: Could not connect to server 127.0.0.1 The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE That might have failed because ....