NAME¶
winbind_krb5_locator - A plugin for MIT and Heimdal Kerberos for detecting KDCs
using Windows semantics.
DESCRIPTION¶
This plugin is part of the
samba(7) suite.
winbind_krb5_locator is a plugin that permits MIT and Heimdal Kerberos libraries
to detect Kerberos Servers (for the KDC and kpasswd service) using the same
semantics that other tools of the Samba suite use. This include site-aware DNS
service record lookups and caching of closest dc. The plugin uses the public
locator API provided by most modern Kerberos implementations.
PREREQUISITES¶
MIT Kerberos (at least version 1.5) or Heimdal Kerberos (at least version 1.0)
is required.
The plugin queries the
winbindd(8) daemon which needs to be configured
and started separately.
The winbind_krb5_locator.so file needs to be manually copied to the plugin
directory of the system Kerberos library. For MIT Kerberos this is often:
/usr/lib/krb5/plugins/libkrb5/. For Heimdal Kerberos this is often:
/usr/lib/plugin/krb5/. Please check your local Kerberos installation for the
correct paths. No modification in /etc/krb5.conf is required to enable the use
of this plugin.
After copying the locator plugin to the appropriate plugin directory it should
immediately be available for use. Users should be able to kinit into their
kerberized Windows environment without any modification or servers being put
manually into /etc/krb5.conf.
VERSION¶
This man page is correct for version 3 of the Samba suite.
AUTHOR¶
The original Samba software and related utilities were created by Andrew
Tridgell. Samba is now developed by the Samba Team as an Open Source project
similar to the way the Linux kernel is developed.
The winbind_krb5_locator manpage was written by Guenther Deschner.