Go to main content

man pages section 7: Standards, Environments, Macros, Character Sets, and Miscellany

Exit Print View

Updated: Wednesday, February 10, 2021

winbind_krb5_locator (7)


winbind_krb5_locator - A plugin for MIT and Heimdal Kerberos for detecting KDCs using Windows semantics.


Please see following description for synopsis


WINBIND_KRB5_LOCATOR(7)                7               WINBIND_KRB5_LOCATOR(7)

       winbind_krb5_locator - A plugin for MIT and Heimdal Kerberos for
       detecting KDCs using Windows semantics.

       This plugin is part of the samba(7) suite.

       winbind_krb5_locator is a plugin that permits MIT and Heimdal Kerberos
       libraries to detect Kerberos Servers (for the KDC and kpasswd service)
       using the same semantics that other tools of the Samba suite use. This
       include site-aware DNS service record lookups and caching of closest
       dc. The plugin uses the public locator API provided by most modern
       Kerberos implementations.

       MIT Kerberos (at least version 1.5) or Heimdal Kerberos (at least
       version 1.0) is required.

       The plugin queries the winbindd(8) daemon which needs to be configured
       and started separately.

       The winbind_krb5_locator.so file needs to be manually copied to the
       plugin directory of the system Kerberos library. For MIT Kerberos this
       is often: /usr/lib/krb5/plugins/libkrb5/. For Heimdal Kerberos this is
       often: /usr/lib/plugin/krb5/. Please check your local Kerberos
       installation for the correct paths. No modification in /etc/krb5.conf
       is required to enable the use of this plugin.

       After copying the locator plugin to the appropriate plugin directory it
       should immediately be available for use. Users should be able to kinit
       into their kerberized Windows environment without any modification or
       servers being put manually into /etc/krb5.conf.

       This man page is correct for version 3 of the Samba suite.

       The original Samba software and related utilities were created by
       Andrew Tridgell. Samba is now developed by the Samba Team as an Open
       Source project similar to the way the Linux kernel is developed.

       The winbind_krb5_locator manpage was written by Guenther Deschner.

       See attributes(7) for descriptions of the following attributes:

       |Availability   | service/network/samba |
       |Stability      | Volatile              |
       This software was built from source available at
       https://github.com/oracle/solaris-userland.  The original community
       source was downloaded from

       Further information about this software can be found on the open source
       community website at http://www.samba.org/.

Samba 4.7                         08/10/2018           WINBIND_KRB5_LOCATOR(7)