[PATCHES] next MIT Kerberos enablement work patchset
jra at samba.org
Fri Apr 27 17:45:02 MDT 2012
On Sat, Apr 28, 2012 at 09:40:41AM +1000, Andrew Bartlett wrote:
> I understand you have concerns about 'samba only' smb.conf files.
> However, it is reasonable that we only use this file if there is
> krb5.conf in the same directory as the smb.conf? A client-only
> configuration would not have this generated by provision. This is only
> another file prepended to the list of possible config files, not the
> replacement. It has made Samba4 AD configurations generated by
> provision much more reliable, which is why it was done.
No, it's a really bad idea long term. There should only be one krb5.conf
file on the system. I tried to do this in Samba3 as "it seemed to make
things more reliable for Samba", and it lead to rains of fire and brimstone :-),
and systems getting royally messed up as people added options in one
place and not the other.
More information about the samba-technical