[WHATSNEW] Samba AD with MIT Kerberos + Version change

Andreas Schneider asn at samba.org
Fri May 5 14:30:39 UTC 2017


On Friday, 5 May 2017 14:18:16 CEST Rowland Penny via samba-technical wrote:
> On Fri, 5 May 2017 13:39:11 +0200
> 
> L.P.H. van Belle <belle at bazuin.nl> wrote:
> > Now based on this below.
> > 
> > I already created this patch for the debian samba 470 packages.
> > This works as long as the code can detect : /etc/krb5kdc correctly
> > without --kdc-config-dir= in provisioning, because most people will
> > us the --kdc-config-dir .
> > 
> > krb5kdc.patch
> > --- samba-4.7.0.orig/python/samba/provision/kerberos_implementation.py
> > +++ samba-4.7.0/python/samba/provision/kerberos_implementation.py
> > @@ -14,5 +14,5 @@
> > 
> >  # You should have received a copy of the GNU General Public License
> >  # along with this program.  If not, see
> > 
> > <http://www.gnu.org/licenses/>. #
> > -kdb_modules_dir = "/usr/local/samba/lib/krb5/plugins/kdb"
> > +kdb_modules_dir = "/usr/lib/x86_64-linux-gnu/krb5/plugins/kdb"
> > 
> >  kdc_default_config_dir = "None"
> > 
> > +kdc_default_config_dir = "/etc/krb5kdc"
> > 
> > 
> > Only this need the correct fix, for that we need the devs..
> > 
> > > Did you also modify python/samba/provision/kerberos.py:29:
> > >   if _glue.is_heimdal_built:
> > > to
> > > 
> > >   if _glue.is_heimdal_built():
> Following Louis's changes to where to put samba.so, it now works for
> me as well, but something else will need fixing. the file
> 'kerberos_implementation.py' is autocreated and doesn't exist in git,
> so I don't see how you can patch it ;-)

I'm reworking this part of the code. We will put the kdc.conf in the private 
dir and use that one by default. This will create less confusion and issues.



More information about the samba-technical mailing list