'net ads' not respecting KRB5_CONFIG when built against MIT Kerberos
paulo at paulo.ac
Mon Apr 23 17:43:24 UTC 2018
Andreas Schneider <asn at samba.org> writes:
> On Monday, 23 April 2018 15:41:19 CEST Paulo Alcantara via samba-technical
>> The 'net ads' command is not respecting the KRB5_CONFIG environment
>> variable when built agaisnt MIT Kerberos. That is, if the user set
>> KRB5_CONFIG to override system profile (/etc/krb5.conf), it will get
>> overwritten late in create_local_private_krb5_conf_for_domain() with
>> samba's local krb5.conf by calling setenv().
> There is a smb.conf options: 'create krb5 conf = no' to disable this. However
> it will disable some AD features if you do this. Especially can lead to issues
> during join.
OK. That worked for me!
More information about the samba-technical