Am 20.02.2013 21:18, schrieb Shelby:
> http://fedoraproject.org/wiki/Features/Samba4
> 
> Seems a bit conflicting as it was stated somewhere in the release that Fedora 
> 18 and Samba 4 could be used as a DC.

not if you read it really

Samba 4 AD DC functionality relies heavily on Heimdal Kerberos implementation. 
Samba 4 includes the embedded
Heimdal, if your system misses it, like we have in Fedora. When embedded 
Heimdal is in use, all Samba 4 code is
compiled against this Kerberos implementation, including client side libraries 
and tools, and traditional file
serving smbd daemon we know as 'samba' package in Fedora.

Fedora uses MIT Kerberos implementation, both server and client side. Heimdal 
and MIT Kerberos are targetting to
implement the same Kerberos V protocol but have their own extensions API and 
certain semantical differences. They
also have slightly different meaning to Kerberos credential cache files format 
where Kerberos-aware applications
store their Kerberos keys. While this is not an issue for client-server 
communication over a network (a Heimdal
client does talk the same Kerberos V protocol that MIT Kerberos server 
understands and vice versa),
interoperability of the client or server code using the same credential cache 
files on the same system is much less
supported for advanced features like S4U2Proxy and S4U2Self.

> ________________________________________
> From: users-boun...@lists.fedoraproject.org 
> [users-boun...@lists.fedoraproject.org] On Behalf Of Kleber Rocha 
> [kli...@gmail.com]
> Sent: Wednesday, February 20, 2013 1:14 PM
> To: Community support for Fedora users
> Subject: Re: Samba 4
> 
> Samba4 on fedora don't support Domain Control setup, here you can read about 
> this:
> 
> http://wiki.samba.org/index.php/Samba4/MIT_KDC

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Reply via email to