[Samba] Group policies are not applied

[Rowland Penny]

On Thu, 2 May 2019 10:43:08 +0200
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:

> Good morning Rowland, 
> 
> No, in most other utils of samba "-k"  means use kerberos auth, as in
> kinit username(@REALM)
> 
> Why in this case its -k KERBEROS 
> 
> The manual does not tell where KERBEROS stands for the "Kerberos
> REALM" or a path to file? A bit confusing. 
> 

OK, if you run this:

samba-tool user create --help

Under:
  Credentials Options:

You will find this:

    -k KERBEROS, --kerberos=KERBEROS
                        Use Kerberos

What isn't obvious from that, is that 'KERBEROS' is actually 'yes'

rowland at devstation:~$ samba-tool user create user37 P4ssw0rd* -H ldap://dc4
ERROR(ldb): Failed to add user 'user37':  - LDAP error 1 LDAP_OPERATIONS_ERROR -  <00002020: Operation unavailable without authentication> <>
rowland at devstation:~$ samba-tool user create user37 P4ssw0rd* -H ldap://dc4 -k yes
User 'user37' created successfully

Rowland