s3:testparm: make it clear that 'client use krb5 netlogon' is experimental

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15815

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Mon Feb 24 08:43:55 UTC 2025 on atb-devel-224

(cherry picked from commit 154875244c5a349e04605cad1f66cb26aeaf86d7)

diff --git a/source3/utils/testparm.c b/source3/utils/testparm.c
index 55c9bf1e076cb31e34a0b2e0fd8d6a51ae4495a8..a93bc020607cddbbd920d908de0503771f7a1f82 100644 (file)
--- a/source3/utils/testparm.c
+++ b/source3/utils/testparm.c
@@ -359,6 +359,7 @@ static int do_global_checks(void)
        const char **lp_ptr = NULL;
        const struct loadparm_substitution *lp_sub =
                loadparm_s3_global_substitution();
+       int ival;
 
        fprintf(stderr, "\n");
 
@@ -784,6 +785,18 @@ static int do_global_checks(void)
                        "options\n\n");
        }
 
+       ival = lp__client_use_krb5_netlogon();
+       if (ival > 0) {
+               fprintf(stderr,
+                       "ERROR: You have configured "
+                       "'client use krb5 netlogon = %s'.\n"
+                       "This is experimental in Samba %s "
+                       "and should not be used in production!\n\n",
+                       ival == Auto ? "auto" : "yes",
+                       samba_version_string());
+               ret = 1;
+       }
+
        if (lp_kerberos_encryption_types() == KERBEROS_ETYPES_LEGACY) {
                fprintf(stderr,
                        "WARNING: You have configured "