'net ads' not respecting KRB5_CONFIG when built against MIT Kerberos

Paulo Alcantara paulo at paulo.ac
Mon Apr 23 17:43:24 UTC 2018


Andreas Schneider <asn at samba.org> writes:

> On Monday, 23 April 2018 15:41:19 CEST Paulo Alcantara via samba-technical 
> wrote:
>> Hi,
>> 
>> The 'net ads' command is not respecting the KRB5_CONFIG environment
>> variable when built agaisnt MIT Kerberos. That is, if the user set
>> KRB5_CONFIG to override system profile (/etc/krb5.conf), it will get
>> overwritten late in create_local_private_krb5_conf_for_domain() with
>> samba's local krb5.conf by calling setenv().
>
> There is a smb.conf options: 'create krb5 conf = no' to disable this. However 
> it will disable some AD features if you do this. Especially can lead to issues 
> during join.

OK. That worked for me!

Thanks!
Paulo



More information about the samba-technical mailing list