diff options
| author | Andreas Schneider <asn@samba.org> | 2017-04-27 11:19:12 +0200 |
|---|---|---|
| committer | Andreas Schneider <asn@cryptomilk.org> | 2017-05-03 15:57:44 +0200 |
| commit | 61d6882b54d975cef25d5498f1662285a97a6179 (patch) | |
| tree | c20aa68074285160b52d7172c7ae12b68e945eb0 /WHATSNEW.txt | |
| parent | 3ef844de27c1b08f76d208d36e79583422a7f368 (diff) | |
| download | samba-61d6882b54d975cef25d5498f1662285a97a6179.tar.gz | |
WHATSNEW: Add Samba AD with MIT Kerberos
Pair-Programmed-With: Guenther Deschner <gd@samba.org>
Signed-off-by: Andreas Schneider <asn@samba.org>
Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: David Disseldorp <ddiss@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Wed May 3 15:57:44 CEST 2017 on sn-devel-144
Diffstat (limited to 'WHATSNEW.txt')
| -rw-r--r-- | WHATSNEW.txt | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 6226ef5e778..a385d076391 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -16,6 +16,34 @@ UPGRADING NEW FEATURES/CHANGES ==================== +Samba AD with MIT Kerberos +-------------------------- + +After four years of development, Samba finally supports compiling and +running Samba AD with MIT Kerberos. You can enable it with: + + ./configure --with-system-mitkrb5 + +Samba requires version 1.15.1 of MIT Kerberos to build with AD DC support. +The krb5-devel and krb5-server packages are required. +The feature set is not on par with with the Heimdal build but the most important +things, like forest and external trusts, are working. Samba uses the KDC binary +provided by MIT Kerberos. + +Missing features, compared to Heimdal, are: + * PKINIT support + * S4U2SELF/S4U2PROXY support + * RODC support (not fully working with Heimdal either) + +The Samba AD process will take care of starting the MIT KDC and it will load a +KDB (Kerberos Database) driver to access the Samba AD database. When +provisioning an AD DC using 'samba-tool' it will take care of creating a correct +kdc.conf file for the MIT KDC. Note that 'samba-tool' will overwrite the system +kdc.conf by default. It is possible to use a different location during +provision. You should consult the 'samba-tool' help and smb.conf manpage for +details. + + Authentication and Authorization audit support ---------------------------------------------- |