'net ads' not respecting KRB5_CONFIG when built against MIT Kerberos

Andreas Schneider asn at samba.org
Mon Apr 23 14:32:07 UTC 2018


On Monday, 23 April 2018 15:41:19 CEST Paulo Alcantara via samba-technical 
wrote:
> Hi,
> 
> The 'net ads' command is not respecting the KRB5_CONFIG environment
> variable when built agaisnt MIT Kerberos. That is, if the user set
> KRB5_CONFIG to override system profile (/etc/krb5.conf), it will get
> overwritten late in create_local_private_krb5_conf_for_domain() with
> samba's local krb5.conf by calling setenv().

There is a smb.conf options: 'create krb5 conf = no' to disable this. However 
it will disable some AD features if you do this. Especially can lead to issues 
during join.

RB-

-- 
Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org
www.samba.org





More information about the samba-technical mailing list