[Samba] logging lines in krb5.conf

Rowland penny rpenny at samba.org
Mon Oct 5 15:58:07 UTC 2020

On 05/10/2020 16:30, Jason Keltz via samba wrote:
> Hi.
> Using MIT5 backend with Samba..
I hope you mean on the clients, the use of MIT as the kdc on a Samba DC 
is experimental and shouldn't be used in production
> I'm wondering if anyone can provide some insight into the "logging" 
> lines in krb5.conf.  By default, they don't exist.
> I've seen mention of adding these lines:
> [logging]
>  default = FILE:/var/log/krb5libs.log
>  kdc = FILE:/var/log/krb5kdc.log
>  admin_server = FILE:/var/log/kadmind.log
> As far as I can tell, the "admin_server" lines don't apply to Samba 
> because the DC doesn't seem to be running anything on the admin port 
> (I think).
> Should these lines be on all the Linux AD clients, or does it only 
> make sense to put these on the server?
It doesn't make sense to put them anywhere, they don't seem to do anything


More information about the samba mailing list