search for: primaydnsdomain

(@Rowland) > Whilst it is quite correct to say that the REALM isn't the same as a > DNS domain, there is a correlation between them. The REALM must be the > DNS domain in uppercase, so this: > > SAMBA_PRINCIPAL=dehydrated-service at YOUR.DOMAIN No, you can have your.primayDNSdomain.tld and have REALM = SOMEREALM.TLD Its not obligated to have REALM the same as the DnsDomain. Its also not obligated to have the realm uppercased, but in my opinion, that should be obligated because programs expect often REALM not realm. And becarefull with : SAMBA_PRINCIPAL=dehydrated-service@...

...the REALM isn't > the same as a > > > DNS domain, there is a correlation between them. The REALM must be > > > the DNS domain in uppercase, so this: > > > > > > SAMBA_PRINCIPAL=dehydrated-service at YOUR.DOMAIN > > > > No, you can have your.primayDNSdomain.tld and have REALM = > > SOMEREALM.TLD Its not obligated to have REALM the same as the > > DnsDomain. > > We are talking a Samba AD DC here and this means the realm must be the > same as the forest dns domain. As Samba AD doesn't (yet) support > subdomains, the domain...

Am 10.01.19 um 14:09 schrieb Rowland Penny via samba: > You don't ;-) > You do what the script should have done (I feel version 0.8.10 will > soon make an appearance), export the cache to use <export > KRB5CCNAME="/tmp/dhcp-dyndns.cc"> and then use '$KRB5CCNAME' wherever > '/tmp/dhcp-dyndns.cc' appears, except for: > [...] Yes, that worked.