samba-tool/testparm: make it clear that 'client use krb5 netlogon' is experimental

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15815

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>

diff --git a/python/samba/netcmd/testparm.py b/python/samba/netcmd/testparm.py
index 6fbde635a7dd022ff88cd0a56dbb251f13208be1..cd854feee9ca84d53cba0c5bd39344259c9784c7 100644 (file)
--- a/python/samba/netcmd/testparm.py
+++ b/python/samba/netcmd/testparm.py
@@ -191,6 +191,16 @@ class cmd_testparm(Command):
                 "'allow_sasl_without_tls_channel_bindings' "
                 "(if really needed).")
 
+        cli_krb5_netlogon = lp.get("client use krb5 netlogon")
+        if cli_krb5_netlogon not in ["no", "default"]:
+            logger.error(
+                "You have configured "
+                "'client use krb5 netlogon = %s'.\n"
+                "This is experimental in Samba %s "
+                "and should not be used in production!\n\n" %
+                (cli_krb5_netlogon, samba.version))
+            valid = False
+
         return valid
 
     def allow_access(self, deny_list, allow_list, cname, caddr):