[PATCHES] next MIT Kerberos enablement work patchset

[Jeremy Allison]

On Sat, Apr 28, 2012 at 09:40:41AM +1000, Andrew Bartlett wrote:
> 
> I understand you have concerns about 'samba only' smb.conf files.
> However, it is reasonable that we only use this file if there is
> krb5.conf in the same directory as the smb.conf?  A client-only
> configuration would not have this generated by provision.  This is only
> another file prepended to the list of possible config files, not the
> replacement.  It has made Samba4 AD configurations generated by
> provision much more reliable, which is why it was done.

No, it's a really bad idea long term. There should only be one krb5.conf
file on the system. I tried to do this in Samba3 as "it seemed to make
things more reliable for Samba", and it lead to rains of fire and brimstone :-),
and systems getting royally messed up as people added options in one
place and not the other.

Jeremy