[Samba] [Announce] Samba 4.7.0 Available - PKINIT support for smart cards with MIT Krb?

Andrew Bartlett abartlet at samba.org
Tue Oct 31 23:01:19 UTC 2017

On Tue, 2017-10-31 at 23:34 +0100, Karel Lang AFD via samba wrote:
> Hi,
> i have a question regarding the smart card support in connection with 
> this announcement:
>  > Samba AD with MIT Kerberos
> --------------------------
>  > Missing features, compared to Heimdal, are:
>  >    * PKINIT support
>  >    * S4U2SELF/S4U2PROXY support
>  >    * RODC support (not fully working with Heimdal either)
> Does it mean the "PKINIT support" will never be a part of the Samba 4 
> with MIT Kerberos, or there is chance the support will be added in future?

It would require development, if this is important to you in a
restricted timeframe then you may wish to assist with that.

Otherwise in general: the folks from Red Hat who have done the work are
intending to close the feature gap in time.


Andrew Bartlett
Andrew Bartlett
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   

More information about the samba mailing list