[Samba] Fwd: Re: Samba4 and sssd, keytab file expires?

[Dr. Lars Hanke]

>> OK, you can get winbind to update your keytab, you need to alter your
>> smb.conf slightly. You need to change 'kerberos method = secrets only'
>> to either 'kerberos method = secrets and keytab' or 'kerberos method =
>> system keytab' and add the line
>>
>> 'dedicated keytab file = /etc/krb5.keytab'.
>
> OOPS, I forgot a line, also add 'winbind refresh tickets = Yes' to smb.conf

Alessandro said to use sssd in the original post. Didn't use that so 
far, but I don't have any evidence that it would read winbind settings 
from smb.conf.

Regards,
  - lars.