On Wed, 11 Dec 2013, Sumit Bose wrote:
On Tue, Dec 10, 2013 at 12:43:33PM +0000, Ondrej Valousek wrote:
> Yes, I use "net ads join".
> I can use shorter name in smb.conf, but that means you have to also use
> custom conf file for sssd, nfs,... rest of Kerberized services which guess
> machine credentials using the hostname.
> I would like to avoid this hassle.
As far as I know the NetBIOS name is only needed for the name$@REALM
principal which is only needed for kinit to get a TGT. For services the
server/fully.qualified.name@REALM principals should work without issues.
And possibly just as a footnote, even then you don't *need* it.
net ads join createupn=rabbits/$HOSTNAME
Then the rabbits/fqdn@REALM principal is usable to get a TGT, and you probably
don't need the short name anywhere. You possibly do need a different
sssd.conf on each machine, but only in an entirely trivial to generate way.
What netbios name *do* you get with net ads join if you would expect to get a
clash on name within the 15 characters?
jh