samba code and kerberos enctypes

Christian M Ambach christian.ambach at
Tue Feb 2 03:07:55 MST 2010

Simo wrote on 02/01/2010 09:20:25 PM:

> I wish this behavior was configurable, so that admins/distros that know
> what they are doing can decide to tell samba to stick to /etc/krb5.conf
> and dictate what to use. (I'd be ok leaving the clever/bad hack as
> default).

It already is configurable, see the new create krb5 conf option that 
introduced with commit b824b1b7. This becomes especially useful when 
trusted domains that have a strange DNS hierarchy and you need to specify 
[capaths] section in the krb5.conf. The files generated by Samba do not 
include this section from the system's krb5.conf.


More information about the samba-technical mailing list