[Samba] logging lines in krb5.conf

[Rowland penny]

On 05/10/2020 16:30, Jason Keltz via samba wrote:
> Hi.
>
> Using MIT5 backend with Samba..
I hope you mean on the clients, the use of MIT as the kdc on a Samba DC 
is experimental and shouldn't be used in production
>
> I'm wondering if anyone can provide some insight into the "logging" 
> lines in krb5.conf.  By default, they don't exist.
>
> I've seen mention of adding these lines:
>
> [logging]
>  default = FILE:/var/log/krb5libs.log
>  kdc = FILE:/var/log/krb5kdc.log
>  admin_server = FILE:/var/log/kadmind.log
>
> As far as I can tell, the "admin_server" lines don't apply to Samba 
> because the DC doesn't seem to be running anything on the admin port 
> (I think).
>
> Should these lines be on all the Linux AD clients, or does it only 
> make sense to put these on the server?
It doesn't make sense to put them anywhere, they don't seem to do anything

Rowland