samba code and kerberos enctypes

[Christian M Ambach]

Simo wrote on 02/01/2010 09:20:25 PM:

> I wish this behavior was configurable, so that admins/distros that know
> what they are doing can decide to tell samba to stick to /etc/krb5.conf
> and dictate what to use. (I'd be ok leaving the clever/bad hack as
> default).

It already is configurable, see the new create krb5 conf option that 
Volker
introduced with commit b824b1b7. This becomes especially useful when 
having
trusted domains that have a strange DNS hierarchy and you need to specify 
a 
[capaths] section in the krb5.conf. The files generated by Samba do not 
include this section from the system's krb5.conf.

Cheers,
Christian