samba code and kerberos enctypes

simo idra at
Tue Feb 2 06:13:32 MST 2010

On Tue, 2010-02-02 at 11:07 +0100, Christian M Ambach wrote:
> Simo wrote on 02/01/2010 09:20:25 PM:
> > I wish this behavior was configurable, so that admins/distros that
> know
> > what they are doing can decide to tell samba to stick
> to /etc/krb5.conf
> > and dictate what to use. (I'd be ok leaving the clever/bad hack as
> > default).
> It already is configurable, see the new create krb5 conf option that
> Volker 
> introduced with commit b824b1b7. This becomes especially useful when
> having 
> trusted domains that have a strange DNS hierarchy and you need to
> specify a 
> [capaths] section in the krb5.conf. The files generated by Samba do
> not 
> include this section from the system's krb5.conf. 

Oh, I didn't notice that commit.
That is great.


Simo Sorce
Samba Team GPL Compliance Officer <simo at>
Principal Software Engineer at Red Hat, Inc. <simo at>

More information about the samba-technical mailing list