search for: win2k14

....AAA.PRIVATE.DOM # this part, I thought it should be AD domain, like: @AAA.PRIVATE.DOM why smbclient uses it's own realm? I should also say that, this linux is a client of two realms: first it's a freeIPA server that runs locally on this box and second, its local samba is a client of AD(win2k14) And my krb5.conf looks like this: -------------------------- [libdefaults] default_realm = PRIVATE.AAA.PRIVATE.DOM dns_lookup_realm = true dns_lookup_kdc = true rdns = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = yes udp_preference_limit = 0 default_ccache_name =...