AS-REQ using SPN

[Richard Sharpe]

On Wed, Nov 15, 2017 at 9:54 AM, Andrew Bartlett via samba-technical
<samba-technical at lists.samba.org> wrote:
> On Wed, 2017-11-15 at 10:03 +0000, Rowland Penny via samba-technical
> wrote:
[deletia]
>> Hi Ralph, would you like to try that again with the Samba recommended
>> krb5.conf ?
>>
>> Which is:
>>
>> [libdefaults]
>>         default_realm = RIVERSIDE.SITE
>>         dns_lookup_realm = false
>>         dns_lookup_kdc = true
>>

Wait. Is this recommended just for Samba as an AD DC or for Samba as a
member server or both?

AFAIK, you really do not want dns_lookup_realm = false for Samba as a
member server, but if I am wrong it would be good to know why.

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)