[Samba] [Samba 4.0] Floating KVNO

Kaito Kumashiro kumashiro.kaito at gmail.com
Thu Feb 14 06:05:56 MST 2013


I'm using Samba 4.0.1 also to authenticate users via Kerberos. Once in a
while however I have to regenerate a keytab, because for reasons unknown to
me, the KVNO is increased by one. I'm not doing anything with an account
the SPN is bound to. The KVNO seems to change automagically after few days
and service cannot talk to the KDC unless I create a new keytab.

What can cause the KVNO (and probably the keys) to change automagically? Is
there a way to disable this?


More information about the samba mailing list