servicePrincipalName cifs

[Love Hörnquist Åstrand]

20 jul 2008 kl. 23.12 skrev Andrew Bartlett:

> On Sun, 2008-07-20 at 23:11 +0400, Matthieu PATOU wrote:
>> Dear all,
>>
>> On my Samba4 domain I always see a request when a user log in for  
>> service cifs/mydomain.tld at MYDOMAIN.
>> I am wondering whether is it important or not.
>> Can someone point me out the interest of this Service ?
>
> As CIFS is the core file-sharing protocol the Samba supports (and over
> which many other protocols are layered), it is very much expected for
> the client to request a ticket to it.

In addition, to make kerberos secure, the client have to verify the  
user's ticket by getting a ticket for itself to to verify that the  
client can decrypt it with its host-key. I've not thought this  
through, but the PAC might save windows clients from need to do that.

Love