[PATCH] Enable Samba KCC for 4.5

Andreas Schneider asn at samba.org
Thu Jun 30 13:45:28 UTC 2016

On Thursday, 30 June 2016 11:12:10 CEST Denis Cardon wrote:
> Hi Andreas and everyone,


> > The samba_kcc stuff is already upstream but you say that it is not fully
> > working yet and you want to turn it on now.
> We've been using the new samba_kcc since samba 4.3.0 (it was actually a
> prerequisite for one of our project last september). The new KCC does
> work and gives something corresponding to the topology designed in sites
> & services mmc. It gives us satisfaction with domains from a few sites
> to dozens of sites. Currently the biggest samba_kcc managed domain we
> have has 40+ sites and DCs.

the thing is I could argue the same for the MIT Kerberos support. It works 
very well, I can establish trusts with FreeIPA, Windows etc., but it isn't 
completely bug free, feature complete and needs polishing.
It looks like the new KCC is in the same state, but it is OK to push the new 
KCC upstream and then enable it?

Can't we fix the remaining issues before we enable it by default? I will do 
the same with MIT Kerberos support ...


	-- andreas

Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org

More information about the samba-technical mailing list