[Samba] Upgrading from Samba 4.8.2 to 4.15.5

Michael Tokarev mjt at tls.msk.ru
Tue Jan 31 07:13:09 UTC 2023


31.01.2023 08:55, Matt Savin via samba пишет:
> In group policies use DNS aliases, then you'll need to change only DNS
> entries for these aliases to point to a new host(s).

I'd say don't use simple dns aliases (cnames) in a DC, but use SPNs instead
(see samba-tool spn). This will manage CNAMEs too, and also manages the KRB
tickets and proper autentication of the server to the client.
(After changing SPNs for a host, one needs to re-generate keytab).

/mjt



More information about the samba mailing list