winbind_krb5_locator − A plugin for MIT and Heimdal Kerberos for detecting KDCs using Windows semantics.


This plugin is part of the samba(7) suite.

winbind_krb5_locator is a plugin that permits MIT and Heimdal Kerberos libraries to detect Kerberos Servers (for the KDC and kpasswd service) using the same semantics that other tools of the Samba suite use. This include site−aware DNS service record lookups and caching of closest dc. The plugin uses the public locator API provided by most modern Kerberos implementations.


MIT Kerberos (at least version 1.5) or Heimdal Kerberos (at least version 1.0) is required.

The plugin queries the winbindd(8) daemon which needs to be configured and started separately.

The file needs to be manually copied to the plugin directory of the system Kerberos library. For MIT Kerberos this is often: /usr/lib/krb5/plugins/libkrb5/. For Heimdal Kerberos this is often: /usr/lib/plugin/krb5/. Please check your local Kerberos installation for the correct paths. No modification in /etc/krb5.conf is required to enable the use of this plugin.

After copying the locator plugin to the appropriate plugin directory it should immediately be available for use. Users should be able to kinit into their kerberized Windows environment without any modification or servers being put manually into /etc/krb5.conf.


This man page is correct for version 3 of the Samba suite.


The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed.

The winbind_krb5_locator manpage was written by Guenther Deschner.

More Linux Commands

XtAppError(3) - low-level error handlers - Linux man page...
The XtAppError function calls the installed error procedure and passes the specified message. The XtAppSetErrorHandler function registers the specified procedur

kernel-command-line(7) Kernel command line parameters.......
The kernel, the initial RAM disk (initrd) and basic userspace functionality may be configured at boot via kernel command line arguments. For command line parame

Tk_CanvasSetStippleOrigin(3) - utility procedures for canvas
These procedures are called by canvas type managers to perform various utility functions. Tk_CanvasTkwin returns the Tk_Window associated with a particular canv

Razor2::Errorhandler(3pm) - Error handling mechanism for Raz
Razor::Errorhandler encapsulates the error handling mechanism used by the modules in Razor bundle. Razor::Errorhandler doesnt have a constructor and is meant to

TIFFtile(3tiff) - tile-related utility routines (Man Page)
TIFFDefaultTileSize returns the pixel width and height of a reasonable-sized tile; suitable for setting up the TileWidth and TileLength tags. If the tw and th v

Tcl_ChannelThreadActionProc(3) - procedures for creating and
Tcl uses a two-layered channel architecture. It provides a generic upper layer to enable C and Tcl programs to perform input and output using the same APIs for

timeout(1) - run a command with a time limit (Man Page).....
Start COMMAND, and kill it if still running after DURATION. Mandatory arguments to long options are mandatory for short options too. --foreground When not runni

lib(3pm) - manipulate @INC at compile time - Linux man page
This is a small simple module which simplifies the manipulation of @INC at compile time. It is typically used to add extra directories to perls search path so t

local(n) - create an object local to a procedure (Man Page)
The local command creates an [incr Tcl] object that is local to the current call frame. When the call frame goes away, the object is automatically deleted. This

orbd-java-1.7.0-openjdk(1) (Commands - Linux man page)......
orbd-java-1.7.0-openjdk.1 - The Server Manager included with the orbd tool is used to enable clients to transparently locate and invoke persistent objects on se

active.times(5) - List of local creation times of newsgroups
The file pathdb/active.times provides a chronological record of when newsgroups were created on the local server. This file is normally updated by mod-active an

timerfd_create(2) - timers that notify via file descriptors
These system calls create and operate on a timer that delivers timer expiration notifications via a file descriptor. They provide an alternative to the use of s

We can't live, work or learn in freedom unless the software we use is free.