Linux. Kerberos does not find the server

The problem is this: I translate AD under Linux. I decided to do the server on openSUSE, although it does not matter. There is an iron server, on it is freshly installed OpenSUSE 42.1.

nt-50:~ # cat /etc/resolv.conf nameserver 172.16.0.3 nameserver 172.16.0.4 search npc-mka.local nt-50:~ # cat /etc/krb5.conf [libdefaults] default_realm = NPC-MKA.LOCAL dns_lookup_realm = true dns_lookup_kdc = true 

Server 4 is a PDC under Windows Server 2012R2, server 3 is bdc under 2012R2. So kinit says that no server can be found. Although for the sake of interest on my laptop under Ubuntu with the same settings, everything works fine.

For the sake of interest, I put exactly the same OpenSUSE distribution in a virtual machine, the contents of resolv and krb are exactly the same, and kinit perfectly finds the server and logs in to it.

If in krb5.conf to add server addresses:

 [realms] NPC-MKA.LOCAL = { kdc = 172.16.0.4 default_domain = npc-mka.local admin_server = 172.16.0.4 } 

That kinit finds the server and is authorized without problems. Well, a couple of service checks on this non-working server:

 nt-50:~ # host npc-mka.local npc-mka.local has address 172.16.0.4 npc-mka.local has address 172.16.0.3 nt-50:~ # host npc.npc-mka.local npc.npc-mka.local has address 172.16.0.3 nt-50:~ # host mka.npc-mka.local mka.npc-mka.local has address 172.16.0.4 nt-50:~ # host 172.16.0.3 3.0.16.172.in-addr.arpa domain name pointer npc.npc-mka.local. nt-50:~ # host 172.16.0.4 4.0.16.172.in-addr.arpa domain name pointer mka.npc-mka.local. nt-50:~ # nslookup npc-mka.local Server: 172.16.0.3 Address: 172.16.0.3#53 Name: npc-mka.local Address: 172.16.0.3 Name: npc-mka.local Address: 172.16.0.4 

I already broke my whole head in what could be the problem, I just didn’t catch the network traffic yet, but I feel I’ll have to. Where is the problem, tell me please?