On 29/10/2020 20:14, dan at newideatest.site wrote:> I am using MIT. Is it too new a version?
It isn't that it is too new a version of kerberos, it is that it is the
wrong kerberos. Samba by default uses Heimdal and there is ongoing work
to try and make a Samba AD DC work with MIT and while it might seem to
work, there are numerous things that either work incorrectly or not at
all. Because of this, using MIT on an Samba AD DC is felt to be
experimental and should not be used in production.
Rowland