I have autogenerated file: [libdefaults] default_realm = KH.DOMAIN.DOM [realms] KH.DOMAIN.DOM = { kdc = 192.168.144.254 } But have error: "ads_connect for domain KH failed: Response too big for UDP, retry with TCP" and get errors with "wbinfo -g","wbinfo -m"("wbinfo -t" - success) So, we need change string "kdc = 192.168.144.254" to "kdc = tcp/192.168.144.254". But we have no possibility to do it ! String without "tcp/" hardcoded at file samba-3.0.28/source/libads/kerberos.c,function "get_kdc_ip_string". So we need some legitimate way to change string with/without "tcp/". I have manually changed source (add "tcp/" to kerberos server at function "get_kdc_ip_string"), and have new autogenerated file: [libdefaults] default_realm = KH.DOMAIN.DOM [realms] KH.DOMAIN.DOM = { kdc = tcp/192.168.144.254 } And all works for me (wbinfo -g","wbinfo -m" - success).
tcp should not be forced in the krb5.conf file. The library should take care for a retry with TCP in case KRB5KRB_ERR_RESPONSE_TOO_BIG is received, maybe 9 years ago this was not handled right yet. Can you confirm that this is not an issue anymore for your these days?