Controls how kerberos tickets are verified.
Valid options are: secrets only - use only the secrets.tdb for ticket verification (default)
system keytab - use only the system keytab for ticket verification
dedicated keytab - use a dedicated keytab for ticket verification
secrets and keytab - use the secrets.tdb first, then the system keytab
The major difference between "system keytab" and "dedicated keytab" is that the latter method relies on kerberos to find the correct keytab entry instead of filtering based on expected principals.
When the kerberos method is in "dedicated keytab" mode, must be set to specify the location of the keytab file.
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | Software\Policies\Samba\smb_conf\kerberos method |
Value Name | kerberos method |
Value Type | REG_SZ |
Default Value | default |