[Samba] Fwd: Re: Samba4 and sssd, keytab file expires?

Dr. Lars Hanke lars at lhanke.de
Wed Dec 31 08:29:27 MST 2014

>> OK, you can get winbind to update your keytab, you need to alter your
>> smb.conf slightly. You need to change 'kerberos method = secrets only'
>> to either 'kerberos method = secrets and keytab' or 'kerberos method =
>> system keytab' and add the line
>> 'dedicated keytab file = /etc/krb5.keytab'.
> OOPS, I forgot a line, also add 'winbind refresh tickets = Yes' to smb.conf

Alessandro said to use sssd in the original post. Didn't use that so 
far, but I don't have any evidence that it would read winbind settings 
from smb.conf.

  - lars.

More information about the samba mailing list