Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've a problem with Samba 4 and Kerberos. If I call kinit, it writes Client not found in Kerberos database while getting initial credentials. I find out, that the Kerberos works with user name only, but the system identifies all domain users with the domain name and backslash as prefix and Kerberos doesn't like it.

$ ssh user@machine #I don't need the domain name while logging in
DOMAIN\user@machine$ kinit
# does not work
DOMAIN\user@machine$ kinit DOMAIN\user
# does work neither
DOMAIN\user@machine$ kinit user
# works
DOMAIN\user@machine$ id
uid=2010(DOMAIN\user) gid=100(users) skupiny=100(users)
DOMAIN\user@machine$ getent passwd
# all domain users prefixed with 'DOMAIN\'

The same applies on list of files printed by ls -l:

-rw-r--r-- 1 DOMAIN\user users 3392 pro 19 14:46 filename

But when I've look at Samba Wiki, they have user name printed by the command getent passwd without the domain name.

getent passwd

I thing, that this may cause, that kinit does not work and the user has no tickets after login. But I don't know, how to get rid of the domain name prefix, what's wrong or what I'm missing in my configuration.

share|improve this question
I'm having exactly the same issue where $ kinit produces kinit: Client 'ADUsername@AD.EXAMPLE.COM' not found in Kerberos database while getting initial credentials. Did you have any luck? – Styne666 Feb 24 '14 at 23:19

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.