[OpenAFS] pam_afs_session and winbind

Russ Allbery rra@stanford.edu
Thu, 30 Aug 2012 17:16:03 -0700

Ben Howell <howellbp@gmail.com> writes:

> That's part of the default krb5.conf, specifying kdc = hostname, as well
> as master_kdc, etc. for ever host that serves as KDC. I do have SRV
> records in place, and I know that from our old implementation that SRV
> lookups DO work the way they're supposed to, but I'm not paid enough to
> argue with execs. :P

Just delete all the kdc lines from your krb5.conf.  It should all still
work.  :)  That's what Brandon means by SRV lookups.

Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>