[Samba] Odd problems making AD DC

[Rowland penny]

On 29/10/2020 20:14, dan at newideatest.site wrote:
> I am using MIT. Is it too new a version?

It isn't that it is too new a version of kerberos, it is that it is the 
wrong kerberos. Samba by default uses Heimdal and there is ongoing work 
to try and make a Samba AD DC work with MIT and while it might seem to 
work, there are numerous things that either work incorrectly or not at 
all. Because of this, using MIT on an Samba AD DC is felt to be 
experimental and should not be used in production.

Rowland