[WHATSNEW] Samba AD with MIT Kerberos + Version change
asn at samba.org
Wed May 3 07:21:38 UTC 2017
On Wednesday, 3 May 2017 09:10:10 CEST Rowland Penny via samba-technical
> On Wed, 03 May 2017 08:30:22 +0200
> Andreas Schneider <asn at samba.org> wrote:
> > On Wednesday, 3 May 2017 07:48:34 CEST Rowland Penny wrote:
> > > On Tue, 2 May 2017 15:39:06 -0600
> > >
> > > Jeff Sadowski <jeff.sadowski at gmail.com> wrote:
> > > > The output says to look here /usr/local/samba/private/krb5.conf
> > > > from the locations you are looking It looks like you might have
> > > > missed that.
> > >
> > > Nope, that is the standard krb5.conf and I have moved it (as I
> > > always do) to /etc/krb5.conf, unless I am missing something, this
> > > is not the kdc.conf
> > samba-tool domain provision --help
> > ~snip~
> > --kdc-config-dir=KDC-CONFIG-DIR
> > Set the MIT KDC config directory
> > (default='/var/kerberos/krb5kdc')
> > ~snip~
> > So, by default it creates the file in /var/kerberos/krb5kdc for me.
> > And that works just fine.
> > However, you're right, specifying a location with the option
> > --kdc-config-dir= doesn't work. You found a bug :)
> Do you mean the one where it being set to 'kdc_default_config_dir =
> "None"' in kerberos_implementation.py ?
should fix the issue with the default config.
However python/samba/netcmd/domain.py this reads --kdc-config-dir and passes
it down to the provision function. Somewhere on the way down the stack it is
probably lost so that the default location is used :(
More information about the samba-technical