kerberos configuration for Samba Server

Felipe Alfaro Solana lkml at mac.com
Fri May 6 01:15:03 UTC 2005


On 5 May 2005, at 15:27, Basil Copeland wrote:

> A good starting place would be here
>
> http://us2.samba.org/samba/docs/man/Samba-HOWTO-Collection/domain- 
> member.html#ads-member
>
> and here
>
> http://us2.samba.org/samba/docs/man/Samba-Guide/DomApps.html#id2594564
>
> But I think you need to ask yourself why you want kerberos.  There's
> some uncertainty because you don't know whether you need the server
> package or the workstation package.  But since you are wanting this to
> be a domain member of a Windows Server 2003 Active Directory domain, I
> don't see you needing to make the Samba server a KDC.  You just want,
> I think, to be able to get tickets from the Windows Server 2003 KDC.
> And the links above should tell you everything you need to know for
> that.

You only need krb5-server if your box is going to act as a KDC. If  
you only want to act as a Kerberos client (which is the case for AD  
members), krb5-workstation and krb5-libs are the only packages required.




More information about the users mailing list