1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
'\" t
.\" Title: winbind_krb5_locator
.\" Author: [see the "AUTHOR" section]
.\" Generator: DocBook XSL Stylesheets v1.75.2 <http://docbook.sf.net/>
.\" Date: 06/22/2012
.\" Manual: 7
.\" Source: Samba 3.6
.\" Language: English
.\"
.TH "WINBIND_KRB5_LOCATOR" "7" "06/22/2012" "Samba 3\&.6" "7"
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
winbind_krb5_locator \- A plugin for MIT and Heimdal Kerberos for detecting KDCs using Windows semantics\&.
.SH "DESCRIPTION"
.PP
This plugin is part of the
\fBsamba\fR(7)
suite\&.
.PP
winbind_krb5_locator
is a plugin that permits MIT and Heimdal Kerberos libraries to detect Kerberos Servers (for the KDC and kpasswd service) using the same semantics that other tools of the Samba suite use\&. This include site\-aware DNS service record lookups and caching of closest dc\&. The plugin uses the public locator API provided by most modern Kerberos implementations\&.
.SH "PREREQUISITES"
.PP
MIT Kerberos (at least version 1\&.5) or Heimdal Kerberos (at least version 1\&.0) is required\&.
.PP
The plugin queries the
\fBwinbindd\fR(8)
daemon which needs to be configured and started separately\&.
.PP
The
winbind_krb5_locator\&.so
file needs to be manually copied to the plugin directory of the system Kerberos library\&. For MIT Kerberos this is often:
/usr/lib/krb5/plugins/libkrb5/\&. For Heimdal Kerberos this is often:
/usr/lib/plugin/krb5/\&. Please check your local Kerberos installation for the correct paths\&. No modification in
/etc/krb5\&.conf
is required to enable the use of this plugin\&.
.PP
After copying the locator plugin to the appropriate plugin directory it should immediately be available for use\&. Users should be able to kinit into their kerberized Windows environment without any modification or servers being put manually into
/etc/krb5\&.conf\&.
.SH "VERSION"
.PP
This man page is correct for version 3 of the Samba suite\&.
.SH "AUTHOR"
.PP
The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&.
.PP
The winbind_krb5_locator manpage was written by Guenther Deschner\&.
|
