[Samba] Fwd: Re: Fwd: Re: Kerberos and NTLMv2 authentication

[Goetz, Patrick G]

On 6/18/19 11:59 AM, Rowland penny via samba wrote:
> On 18/06/2019 17:24, Edouard Guigné via samba wrote:
>> "winbind refresh tickets = yes" did not help for my case.
>>
> It always has for myself, I have never had to refresh any kerberos 
> machine tickets manually
> 

Are you only ever authenticating against a Samba AD domain controller, 
though?  Windows AD in the wild can be a pain in the ass.  For example, 
I stop reading whenever I see RF2307 or adding POSIX attributes to 
Windows AD -- our AD domain admins can't (or possibly won't) accommodate 
this.



> Rowland
> 
> 
>