|
You must use at least the following three options in smb.conf:
realm = your.kerberos.REALM
|
security = ADS
|
| # The following parameter need only be specified if present. |
| # The default setting if not present is Yes. |
encrypt passwords = yes
|
In case samba cannot correctly identify the appropriate ADS server using the realm name, use the
password server option in smb.conf:
password server = your.kerberos.server
|
The most common reason for which Samba may not be able to locate the ADS domain controller is a consequence of
sites maintaining some DNS servers on UNIX systems without regard for the DNS requirements of the ADS
infrastructure. There is no harm in specifying a preferred ADS domain controller using the
password
server
.
|
