CTDB 46.update-keytabs.script query

[Martin Schwenke]

Hi Pavel,

[Note CC: samba-technical :-)]

I hope all is well with you!

It has only taken me ~1.5 years, but I am finally planning to use
keytab syncing using 46.update-keytabs.script and associated smb.conf
options.  :-)

It all looks quite simple.  However, I don't understand the need for
the --configfile option in:

  net ads keytab \
    create --option='sync machine password script=' \
    --configfile="$CTDB_BASE/lib/server.conf"

I'm wondering about disadvantages of using the default (of, say,
/etc/samba/smb.conf).

I vaguely assume there is some limitation when using:

  include = registry

in smb.conf.  However, the net command should be able to attach to
registry.tdb in the "recovered" event.  It seems to work.

Is there a reason not to just default to smb.conf?

If it is about flexibility (possibly for efficiency?) then I'm happy to
add a new CTDB script option, such as CTDB_UPDATE_KEYTABS_CONFIG and
pass it to --configfile if it is set.  That would be easy.

Apart from not understanding this particular detail, my main concern is
that it doesn't work "out of the box"...

Thanks for any clues!

peace & happiness,
martin