Kerberos support on Samba

[Vikram Bharti]

Any further clarification would be appreciated.

On Wed, 3 Mar, 2021, 8:57 pm Vikram Bharti, <vikrambharti33 at gmail.com>
wrote:

> Hi,
>
> Was going through this.
>
> https://github.com/samba-team/samba/blob/master/source3/include/libsmbclient.h
>
> And I found that we do support Kerberos.  Please correct my understanding
>
>
> Assumption 1:- does this mean if a user x has permission on SMB share then
> he can access SMB shares by sending credentials to callback API and Samba
> can use those tokens to forward it to SMB shares and provide the access?
> What i understand from t*estBrowse *example , just enable the Kerberos
> flag and pass the user credential to call back function. Which
> internally uses Kinit to pass the credentials and get TGT and TGS
> exchanged. And then libsmbclient forward the request to SMB shares with
> TGS received and initiate TCP session.
>
>
>
> Assumption 2:- it's only possible to get the token for the service account
> set up for a computer account as mentioned below.
>
> Setspn -s http/<computer-name>.<domain-name> <domain-user-account>
> RegardsVikram
>
>
>
> <https://github.com/samba-team/samba/blob/master/source3/include/libsmbclient.h>
>
>
>