[PATCH] Enable Samba KCC for 4.5
asn at samba.org
Thu Jun 30 13:45:28 UTC 2016
On Thursday, 30 June 2016 11:12:10 CEST Denis Cardon wrote:
> Hi Andreas and everyone,
> > The samba_kcc stuff is already upstream but you say that it is not fully
> > working yet and you want to turn it on now.
> We've been using the new samba_kcc since samba 4.3.0 (it was actually a
> prerequisite for one of our project last september). The new KCC does
> work and gives something corresponding to the topology designed in sites
> & services mmc. It gives us satisfaction with domains from a few sites
> to dozens of sites. Currently the biggest samba_kcc managed domain we
> have has 40+ sites and DCs.
the thing is I could argue the same for the MIT Kerberos support. It works
very well, I can establish trusts with FreeIPA, Windows etc., but it isn't
completely bug free, feature complete and needs polishing.
It looks like the new KCC is in the same state, but it is OK to push the new
KCC upstream and then enable it?
Can't we fix the remaining issues before we enable it by default? I will do
the same with MIT Kerberos support ...
Andreas Schneider GPG-ID: CC014E3D
Samba Team asn at samba.org
More information about the samba-technical