[Samba] Kerberos authentication issue after upgrading from 4-14-stable to 4-15-stable

Rowland Penny rpenny at samba.org
Thu Jan 27 11:44:27 UTC 2022


On Thu, 2022-01-27 at 12:14 +0100, L.P.H. van Belle via samba wrote:
> Im wondering why you dont use winbind for the keytabs setup and let
> samba handle it. 
>  
> Thats what i suggest. 
> Install winbind only. 
> 
> Use : 
>     dedicated keytab file = /etc/krb5.keytab
>     kerberos method = secrets and keytab
> 
>     # renew the kerberos ticket
>     winbind refresh tickets = yes
> 
> Add the use that keytab or make separated keytab file as you do now. 
> 
> You might have a reason to use k5start but i havent see it so far. 
> 
> Greetz, 
> 
> Louis

The other question is, why limit the keytab to RC4-HMAC ?

Rowland





More information about the samba mailing list