AS-REQ using SPN

Richard Sharpe realrichardsharpe at
Wed Nov 15 18:42:52 UTC 2017

On Wed, Nov 15, 2017 at 9:54 AM, Andrew Bartlett via samba-technical
<samba-technical at> wrote:
> On Wed, 2017-11-15 at 10:03 +0000, Rowland Penny via samba-technical
> wrote:
>> Hi Ralph, would you like to try that again with the Samba recommended
>> krb5.conf ?
>> Which is:
>> [libdefaults]
>>         default_realm = RIVERSIDE.SITE
>>         dns_lookup_realm = false
>>         dns_lookup_kdc = true

Wait. Is this recommended just for Samba as an AD DC or for Samba as a
member server or both?

AFAIK, you really do not want dns_lookup_realm = false for Samba as a
member server, but if I am wrong it would be good to know why.

Richard Sharpe

More information about the samba-technical mailing list