How to check if kerberos is being used.

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Benoit Panizzon wrote:

| Does winbind/samba do kerberos all by itself if
| hitting a ADS Native Mode  or do you have to configure
| it to do so? (win2k clients use it without any config,
| so that should be possible)

winbindd will use kerberos for its own domain assuming you
have set 'security = ads'.  It will also use kerberos in
the session setup to any DC's in a trusted native mode domain
(but not mixed mode).

| How can I check if kerberos is being used or if winbind did
| fallback to NT4  RPC mode?

level 10 debug log or ethereal trace.

| Are there any benefits of using kerberos at all (as
| it apparently works on my config without  specifying anything).

krb5 is necessary for supporting the AD transtivei trusts.




- --
cheers, jerry
- ----------------------------------------------------------------------
Hewlett-Packard            ------------------------- http://www.hp.com
SAMBA Team                 ---------------------- http://www.samba.org
GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
"...a hundred billion castaways looking for a home." ----------- Sting
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFA6v3UIR7qMdg1EfYRAkveAKDJ1Yk1REYm1fmjwCRMT7shw+n0egCfSOlU
D4M8VblZYAtS2nXaaw3/I5U=
=qTLR
-----END PGP SIGNATURE-----