WINBIND_KRB5_LOCATOR(7) 7 WINBIND_KRB5_LOCATOR(7)NAME
winbind_krb5_locator - A plugin for MIT and Heimdal Kerberos for detecting KDCs using Windows semantics.
DESCRIPTION
This plugin is part of the samba(7) suite.
winbind_krb5_locator is a plugin that permits MIT and Heimdal Kerberos libraries to detect Kerberos Servers (for the KDC and kpasswd
service) using the same semantics that other tools of the Samba suite use. This include site-aware DNS service record lookups and caching
of closest dc. The plugin uses the public locator API provided by most modern Kerberos implementations.
PREREQUISITES
MIT Kerberos (at least version 1.5) or Heimdal Kerberos (at least version 1.0) is required.
The plugin queries the winbindd(8) daemon which needs to be configured and started separately.
The winbind_krb5_locator.so file needs to be manually copied to the plugin directory of the system Kerberos library. For MIT Kerberos this
is often: /usr/lib/krb5/plugins/libkrb5/. For Heimdal Kerberos this is often: /usr/lib/plugin/krb5/. Please check your local Kerberos
installation for the correct paths. No modification in /etc/krb5.conf is required to enable the use of this plugin.
After copying the locator plugin to the appropriate plugin directory it should immediately be available for use. Users should be able to
kinit into their kerberized Windows environment without any modification or servers being put manually into /etc/krb5.conf.
VERSION
This man page is correct for version 3 of the Samba suite.
AUTHOR
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open
Source project similar to the way the Linux kernel is developed.
The winbind_krb5_locator manpage was written by Guenther Deschner.
Samba 4.0 06/17/2014 WINBIND_KRB5_LOCATOR(7)
Check Out this Related Man Page
KRB5-CONFIG(1) MIT Kerberos KRB5-CONFIG(1)NAME
krb5-config - tool for linking against MIT Kerberos libraries
SYNOPSIS
krb5-config [--help | --all | --version | --vendor | --prefix | --exec-prefix | --defccname | --defktname | --defcktname | --cflags |
--libs [libraries]]
DESCRIPTION
krb5-config tells the application programmer what flags to use to compile and link programs against the installed Kerberos libraries.
OPTIONS --help prints a usage message. This is the default behavior when no options are specified.
--all prints the version, vendor, prefix, and exec-prefix.
--version
prints the version number of the Kerberos installation.
--vendor
prints the name of the vendor of the Kerberos installation.
--prefix
prints the prefix for which the Kerberos installation was built.
--exec-prefix
prints the prefix for executables for which the Kerberos installation was built.
--defccname
prints the built-in default credentials cache location.
--defktname
prints the built-in default keytab location.
--defcktname
prints the built-in default client (initiator) keytab location.
--cflags
prints the compilation flags used to build the Kerberos installation.
--libs [library]
prints the compiler options needed to link against library. Allowed values for library are:
+------------+------------------------------------------------+
|krb5 | Kerberos 5 applications (default) |
+------------+------------------------------------------------+
|gssapi | GSSAPI applications with Kerberos 5 bindings |
+------------+------------------------------------------------+
|kadm-client | Kadmin client |
+------------+------------------------------------------------+
|kadm-server | Kadmin server |
+------------+------------------------------------------------+
|kdb | Applications that access the Kerberos database |
+------------+------------------------------------------------+
EXAMPLES
krb5-config is particularly useful for compiling against a Kerberos installation that was installed in a non-standard location. For exam-
ple, a Kerberos installation that is installed in /opt/krb5/ but uses libraries in /usr/local/lib/ for text localization would produce the
following output:
shell% krb5-config --libs krb5
-L/opt/krb5/lib -Wl,-rpath -Wl,/opt/krb5/lib -L/usr/local/lib -lkrb5 -lk5crypto -lcom_err
SEE ALSO kerberos(1), cc(1)AUTHOR
MIT
COPYRIGHT
1985-2013, MIT
1.11.3KRB5-CONFIG(1)