[Samba] Keytabs (obviously) not valid after password change

George jorgito1412 at gmail.com
Sun Aug 17 13:34:42 MDT 2014

I am running 4.1.9, with the keytab exported using samba-tool and placed on

It looked strange that this has been barely mentioned on the lists. Some
misconfiguration on my side maybe?

Steve, do you have "kerberos method" set on your member servers?

Best regards,


On Sun, Aug 17, 2014 at 7:24 AM, steve <steve at steve-ss.com> wrote:

> On Sun, 2014-08-17 at 00:12 -0300, George wrote:
> >  every
> > 7 days Samba changes the machine account password which drives the keytab
> > unusable.
> Hi
> 4.1.7 AD with sssd 1.12.0
> We don't observe that behaviour. sssd uses the machine key of the box it
> is running upon. Our Linux machines have been up months with the same
> keytab. Maybe something has changed recently? Anyone else?
> Cheers,
> Steve

More information about the samba mailing list