When not building with the experimental (!!) system MIT Kerberos, Samba will use the builtin Heimdal Kerberos. For this reason, enableKerberos = true will still include a krb5 implementation, built right into Samba. There is no benefit in using MIT krb5, however it has some downsides like not being able to assign computer GPOs [1]. The ArchWiki [2] also mentions this in their installation section. [1]: https://lists.samba.org/archive/samba/2018-July/216779.html [2]: https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller |
||
---|---|---|
.. | ||
4.x-fix-makeflags-parsing.patch | ||
4.x-no-persistent-install-dynconfig.patch | ||
4.x-no-persistent-install.patch | ||
4.x.nix | ||
patch-source3__libads__kerberos_keytab.c.patch |