1 Source: Home brewed

     2 ...so called MS Extensions do not support "host" (service name) as a wildcard also for "cifs".

     3 Drop-in will fix this issue.

     4 

     5 --- a/source3/libads/kerberos_keytab.c	2014-12-01 12:48:32.000000000 +0000

     6 +++ samba-4.1.14/source3/libads/kerberos_keytab.c	2015-01-16 08:25:27.237534267 +0000

     7 @@ -559,11 +559,11 @@

     8  		}

     9  	}

    10  

    11 -#if 0	/* don't create the CIFS/... keytab entries since no one except smbd

    12 +#if 1	/* don't create the CIFS/... keytab entries since no one except smbd

    13  	   really needs them and we will fall back to verifying against

    14  	   secrets.tdb */

    15  

    16 -	ret = ads_keytab_add_entry(ads, "cifs"));

    17 +	ret = ads_keytab_add_entry(ads, "cifs");

    18  	if (ret != 0 ) {

    19  		DEBUG(1, (__location__ ": ads_keytab_add_entry failed while "

    20  			  "adding 'cifs'.\n"));