[Samba] Is LDAP + Kerberos without Active Directory no longer supported?

[Daniel Lakeland]

On 4/14/23 11:01, Rowland Penny via samba wrote:
>
>
> On 14/04/2023 18:37, Ralph Boehme via samba wrote:
>>
>>>
>> this has been a quite common setup in certain environment. Iirc it 
>> should still work. Iirc when we applied security hardening recently 
>> we change to reject service tickets with a PAC when we're running in 
>> security=user mode, but the details escape my mind.
>>
>> -slow
>>
>>
>
> It may be a common setup, but it isn't one I have come across before 
> (which doesn't mean much), but I think I have proof it should still 
> work, but perhaps just not as it did.
> It doesn't help that Daniel isn't sure what version of Samba he was 
> using and on what version of Debian (?). If we could find out these, 
> we may be able to track down what changed and when. 


I last reported a bug to Debian with samba 4.8 so let's assume that I 
was using that when I had it working. I believe someone else tried with 
4.13 but I had to back out of that version to get things back on track 
and I'm only now getting back to this.