[Samba] winbind & kerberos question

[Rowland Penny]

On Mon, 2022-06-27 at 13:53 +0100, Rowland Penny via samba wrote:
> On Mon, 2022-06-27 at 14:41 +0200, Andreas Hauffe via samba wrote:
> > 	Error verifying signature: parse error
> > Hi Rowland,
> > 
> > thanks for the document. I'll study this and will see if there is
> > any 
> > help written down.
> > 
> > A point, I forgot to mention, is that ticket refreshing with
> > winbind 
> > worked well with the given configuration until the update of samba
> > 4.13 
> > to 4.15 by the SUSE team in case of openSUSE Leap 15.3. And it is
> > still 
> > present with samba 4.16.2 and openSUSE Leap 15.4.
> > 
> > 
> 
> Try reading this:
> 
> https://wiki.samba.org/index.php/Samba_4.15_Features_added/changed#Scanning_of_trusted_domains_and_enterprise_principals
> 
> I wonder if that has anything to do with your problem ?
> 
> Rowland

There has just been a post on the samba-technical mailing list about
this very subject and it confirms what I was thinking.

Add 'winbind scan trusted domains = yes' to your smb.conf and this
should fix your problem.

Rowland