[Samba] Samba and CNAME
abartlet at samba.org
Tue Jul 24 08:59:37 UTC 2018
On Tue, 2018-07-24 at 10:56 +0200, L.P.H. van Belle via samba wrote:
> And you dont need to add extra SPN's for aliases that is if you DNS setup is correct.
> Just remember, every server must have an A and PTR record, save you a lot of problems.
> And best is to point your CNAME to FQDN.
This only applies to some MIT clients. Windows does not follow the
(untrustworthy, cryptographically) PTR record to find the real host
name, it relies on the extra SPNs being on the record.
That is why the SPNs were invented.
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
More information about the samba