Samba problem - NT_STATUS_LOGON_FAILURE
 

Still having a bit of a problem getting Samba to work from a Win 2012 server.

Environment is:
Windows Domain controller - ADServer
Linux Samba server – Storage1

Problem is:
I cannot connect to Samba share from Windows machine, user logon fails.
I then test the smb connection from the Linux Samba server

Smbclient –L \\Storage1
which fails with - session setup failed: NT_STATUS_LOGON_FAILURE

However if I specify the workgroup like so:

Smbclient –L \\Storage1\Winshare -W Domain1.local
It works fine.

Here is my configuration:
/etc/resolv.conf:

domain domain1.local
nameserver 192.168.10.5 (ADServer)
nameserver 123.123.123.4 (external DNS server)

/etc/sysconfig/network:

HOSTNAME= Storage1.Domain1.local

/etc/krb5.conf:

[libdefaults]
default_realm = DOMAIN1.LOCAL
dns_lookup_realm = true
dns_lookup_kdc = true
forwardable = false
[realms]
DOMAIN1.LOCAL = {
kdc = adserver.domain1.local
admin_server = adserver.domain1.local
}
[domain_realm]
.domain1.local = DOMAIN1.LOCAL
domain1.local = DOMAIN1.LOCAL

System -> Administration -> Authentication

User account database: Winbind
Winbind Domain: Domain1
Security Model: ads
Winbind ADS Realm: DOMAIN1.LOCAL
Winbind domain controllers: ADServer.Domain1.local
Template shell: /sbin/nologon
{Join Domain}, WinAdmin, <password>

Resultant /etc/samba/smb.conf

Workgroup = Domain1 (not Domain1.local)
password server = ADServer.Domain1.local
realm = DOMAIN1.LOCAL
security = ads
template shell = /sbin/nologon
winbind use default domain = false
winbind offline logon = false

Net ads join –U WinAdmin
net ads testjoin - ok