diff options
| author | Andreas Schneider <asn@samba.org> | 2021-06-23 10:13:24 +0200 |
|---|---|---|
| committer | Andreas Schneider <asn@cryptomilk.org> | 2021-06-23 10:46:22 +0000 |
| commit | 62875044ec41449967ff7a139e0c5816fa471428 (patch) | |
| tree | eb4ae788b554c4de952dfbe01b797b13e5204a3c /WHATSNEW.txt | |
| parent | 3e0fbc79b9c53a7244a35649bb5c6615390a1453 (diff) | |
| download | samba-62875044ec41449967ff7a139e0c5816fa471428.tar.gz | |
WHATSNEW: Document changes of trusted domains scanning and enterpise principals
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Wed Jun 23 10:46:22 UTC 2021 on sn-devel-184
Diffstat (limited to 'WHATSNEW.txt')
| -rw-r--r-- | WHATSNEW.txt | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/WHATSNEW.txt b/WHATSNEW.txt index 5034de66ad9..d8effc5ce09 100644 --- a/WHATSNEW.txt +++ b/WHATSNEW.txt @@ -108,6 +108,17 @@ smbd: winbindd: --log-stdout -> --debug-stdout +Scanning of trusted domains and enterpise principals +---------------------------------------------------- + +As an artifact from the NT4 times, we still scanned the list of trusted domains +on winbindd startup. This is wrong as we never can get a full picture in Active +Directory. It is time to change the default value to No. Also with this change +we always use enterprise principals for Kerberos so that the DC will be able +to redirect ticket requests to the right DC. This is e.g needed for one way +trusts. The options `winbind use krb5 enterprise principals` and +`winbind scan trusted domains` will be deprecated in one of the next releases. + REMOVED FEATURES ================ |