Am 20.02.2013 21:18, schrieb Shelby:
http://fedoraproject.org/wiki/Features/Samba4
Seems a bit conflicting as it was stated somewhere in the release that Fedora 18 and
Samba 4 could be used as a DC.
not if you read it really
Samba 4 AD DC functionality relies heavily on Heimdal Kerberos implementation. Samba 4
includes the embedded
Heimdal, if your system misses it, like we have in Fedora. When embedded Heimdal is in
use, all Samba 4 code is
compiled against this Kerberos implementation, including client side libraries and tools,
and traditional file
serving smbd daemon we know as 'samba' package in Fedora.
Fedora uses MIT Kerberos implementation, both server and client side. Heimdal and MIT
Kerberos are targetting to
implement the same Kerberos V protocol but have their own extensions API and certain
semantical differences. They
also have slightly different meaning to Kerberos credential cache files format where
Kerberos-aware applications
store their Kerberos keys. While this is not an issue for client-server communication over
a network (a Heimdal
client does talk the same Kerberos V protocol that MIT Kerberos server understands and
vice versa),
interoperability of the client or server code using the same credential cache files on the
same system is much less
supported for advanced features like S4U2Proxy and S4U2Self.
________________________________________
From: users-bounces(a)lists.fedoraproject.org [users-bounces(a)lists.fedoraproject.org] On
Behalf Of Kleber Rocha [klinux(a)gmail.com]
Sent: Wednesday, February 20, 2013 1:14 PM
To: Community support for Fedora users
Subject: Re: Samba 4
Samba4 on fedora don't support Domain Control setup, here you can read about this:
http://wiki.samba.org/index.php/Samba4/MIT_KDC