[Samba] Samba4 DC, SPNs and a complex Windows stack

[David Bear]

On 12/17/2014 01:35 AM, Luke Bigum wrote:
> Hello,
>
> We're using Samba 4.1.11 as domain controllers and over the past two weeks I've run into several issues with unrelated Windows software, the problems of which all point to Kerberos authentication and SPNs as being somehow involved. If there are many more issues it might start to get politically difficult *not* to blame the DCs, and I don't want to point fingers at Samba.
>
> Are there any known issues with running complex Windows stacks on top of Samba 4 DCs (eg: Hyper-V clusters with migration, 3rd party Windows software that uses SSPI from the MSSQL client libraries)? Perhaps some intricacies of AD that Heimdal doesn't mirror?
>
This would seem to be interesting information, but of limited value. 
Unless you have a set of specific errors (error codes, return messages, 
etc) that your windows programs are able to log or show somehow, how 
would you ever be able to map the error code to the 'solution'?

It would be more productive to have error codes, stack traces, and 
detailed descriptions of the symptoms of the problem rather than a 
blanket statement -"We have never seen problems with hyperV and samba". ..


-- 
David Bear
602-903-6476