[Samba] logging lines in krb5.conf
rpenny at samba.org
Mon Oct 5 15:58:07 UTC 2020
On 05/10/2020 16:30, Jason Keltz via samba wrote:
> Using MIT5 backend with Samba..
I hope you mean on the clients, the use of MIT as the kdc on a Samba DC
is experimental and shouldn't be used in production
> I'm wondering if anyone can provide some insight into the "logging"
> lines in krb5.conf. By default, they don't exist.
> I've seen mention of adding these lines:
> default = FILE:/var/log/krb5libs.log
> kdc = FILE:/var/log/krb5kdc.log
> admin_server = FILE:/var/log/kadmind.log
> As far as I can tell, the "admin_server" lines don't apply to Samba
> because the DC doesn't seem to be running anything on the admin port
> (I think).
> Should these lines be on all the Linux AD clients, or does it only
> make sense to put these on the server?
It doesn't make sense to put them anywhere, they don't seem to do anything
More information about the samba