AD Forest Tips and FAQs
When generating the krb5.conf file, the
dns_lookup_kdc option defaults to
false. Quantum Support can alter this setting by changing a Registry Key value.
In some Microsoft AD environments, you may need to exclude or ignore specific trusted domains, such as those that are behind firewalls. Use the SMB
windbind:ignore domains and
SMB global options to accomplish this exclusion. See SMB Share Options.
winbind refresh tickets
> share change smb global winbind:ignore domains = dom1 dom2
> share change smb global winbind refresh tickets = yes