Hello,
I would like to know when do we need to specify "kpasswd protocol = SET_CHANGE" in krb5.com in the [realms] section when talking to windows AD domain. I usually don't use it and it works fine BUT I recently needed to use it since "net ads join ..." hanged during the last part of join domain process when it tries to use kpasswd protocol. The AD was windows2000. >From my understanding, kpasswd_protocol can be set to SET_CHANGE or RPCSEC_GSS. Is it safe to always use SET_CHANGE in krb5.conf? what kind of AD GPO or setting in the AD controls that? Any info regarding it will be highly appreciated. Cheers, Ephi -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
