Go to main content

man pages section 8: System Administration Commands

Exit Print View

Updated: Wednesday, July 27, 2022

winbind_krb5_locator (8)


winbind_krb5_locator - A plugin for MIT and Heimdal Kerberos for detecting KDCs using Windows semantics.


Please see following description for synopsis


WINBIND_KRB5_LOCATOR(8)                8               WINBIND_KRB5_LOCATOR(8)

       winbind_krb5_locator - A plugin for MIT and Heimdal Kerberos for
       detecting KDCs using Windows semantics.

       This plugin is part of the samba(7) suite.

       winbind_krb5_locator is a plugin that permits MIT and Heimdal Kerberos
       libraries to detect Kerberos Servers (for the KDC and kpasswd service)
       using the same semantics that other tools of the Samba suite use. This
       include site-aware DNS service record lookups and caching of closest
       dc. The plugin uses the public locator API provided by most modern
       Kerberos implementations.

       MIT Kerberos (at least version 1.5) or Heimdal Kerberos (at least
       version 1.0) is required.

       The plugin queries the winbindd(8) daemon which needs to be configured
       and started separately.

       The winbind_krb5_locator.so file needs to be manually copied to the
       plugin directory of the system Kerberos library. For MIT Kerberos this
       is often: /usr/lib/krb5/plugins/libkrb5/. For Heimdal Kerberos this is
       often: /usr/lib/plugin/krb5/. Please check your local Kerberos
       installation for the correct paths. No modification in /etc/krb5.conf
       is required to enable the use of this plugin.

       After copying the locator plugin to the appropriate plugin directory it
       should immediately be available for use. Users should be able to kinit
       into their kerberized Windows environment without any modification or
       servers being put manually into /etc/krb5.conf.

       This man page is part of version 4.13.17 of the Samba suite.

       The original Samba software and related utilities were created by
       Andrew Tridgell. Samba is now developed by the Samba Team as an Open
       Source project similar to the way the Linux kernel is developed.

       The winbind_krb5_locator manpage was written by Guenther Deschner.

       See attributes(7) for descriptions of the following attributes:

       |Availability   | service/network/samba |
       |Stability      | Volatile              |

       Source code for open source software components in Oracle Solaris can
       be found at https://www.oracle.com/downloads/opensource/solaris-source-

       This software was built from source available at
       https://github.com/oracle/solaris-userland.  The original community
       source was downloaded from

       Further information about this software can be found on the open source
       community website at http://www.samba.org/.

Samba 4.13.17                     06/28/2022           WINBIND_KRB5_LOCATOR(8)