[Samba] Samba 3, winbind, win2k AD: Kerberos question

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sean Kennedy wrote:

| My question is this:  Is there a cleaner, more
| fault tolerant method than this?  I googled, and read about
| dns srv records being used ( intead of hardcoding ), which I
| understand win2k uses to begin with, but I don't know how to
| turn those on on my linux box.

If you are using MIT, then you will need to enable
- -DKRB5_DNS_LOOKUP -DKRB5_DNS_LOOKUP_KDC at compile time
(RH doesn't do this IIRC) and then use the following

## /etc/krb5.conf
[libdefaults]
~        dns_fallback = true




- --
cheers, jerry
- ----------------------------------------------------------------------
Hewlett-Packard            ------------------------- http://www.hp.com
SAMBA Team                 ---------------------- http://www.samba.org
GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAYyJfIR7qMdg1EfYRAhpFAJ4z4FLKEmWjiL3gvJH5pdoX5aWlLwCfWzXr
9KPNaHnO7Q9qkM4J0qKcBBU=
=NPQh
-----END PGP SIGNATURE-----