[Samba] Odd problems making AD DC

Rowland penny rpenny at samba.org
Thu Oct 29 20:26:26 UTC 2020

On 29/10/2020 20:14, dan at newideatest.site wrote:
> I am using MIT. Is it too new a version?

It isn't that it is too new a version of kerberos, it is that it is the 
wrong kerberos. Samba by default uses Heimdal and there is ongoing work 
to try and make a Samba AD DC work with MIT and while it might seem to 
work, there are numerous things that either work incorrectly or not at 
all. Because of this, using MIT on an Samba AD DC is felt to be 
experimental and should not be used in production.


More information about the samba mailing list