How to check if kerberos is being used.

Gerald (Jerry) Carter jerry at
Tue Jul 6 19:30:28 GMT 2004

Hash: SHA1

Benoit Panizzon wrote:

| Does winbind/samba do kerberos all by itself if
| hitting a ADS Native Mode  or do you have to configure
| it to do so? (win2k clients use it without any config,
| so that should be possible)

winbindd will use kerberos for its own domain assuming you
have set 'security = ads'.  It will also use kerberos in
the session setup to any DC's in a trusted native mode domain
(but not mixed mode).

| How can I check if kerberos is being used or if winbind did
| fallback to NT4  RPC mode?

level 10 debug log or ethereal trace.

| Are there any benefits of using kerberos at all (as
| it apparently works on my config without  specifying anything).

krb5 is necessary for supporting the AD transtivei trusts.

- --
cheers, jerry
- ----------------------------------------------------------------------
Hewlett-Packard            -------------------------
SAMBA Team                 ----------------------
GnuPG Key                  ----
"...a hundred billion castaways looking for a home." ----------- Sting
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla -


More information about the samba-technical mailing list