[Samba] Connections to Samba fail when "includedir" is set in krb5.conf (e. g. after RHEL 7.2 to 7.3 update)

[Rowland Penny]

On Thu, 29 Dec 2016 23:21:23 +0100
Marc Muehlfeld <mmuehlfeld at samba.org> wrote:

> Am 29.12.2016 um 22:17 schrieb Rowland Penny via samba:
> > Hi Marc, that is your problem there and it has highlighted another
> > problem, the Samba wiki page:
> > 
> > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member
> > 
> > Doesn't have anything about krb5.conf
> >
> > You should run the same /etc/krb5.conf as on a DC, ...
> 
> You can set up a domain member without configuring Kerberos in
> krb5.conf. That's what is currently described on the Wiki page and the
> procedure works. However, in this case you're not able to use Kerberos
> stuff, such as kinit.

No you cannot, a lot of problems are caused by
mis-configured /etc/krb5.conf files, as you have found out yourself.
 
> 
> I add a new section to the page tomorrow describing the Kerberos
> configuration on the domain member.

Don't bother, I have already done it.

Rowland