docs:smbdotconf: Update 'kerberos method' with 'sync machine password to keytab'

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15689

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Pavel Filipenský <pfilipensky@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Tue Aug 13 15:27:26 UTC 2024 on atb-devel-224

diff --git a/docs-xml/smbdotconf/security/kerberosmethod.xml b/docs-xml/smbdotconf/security/kerberosmethod.xml
index b7cd988cd190c83defd25c24881535889cec776f..c9d70580c59437cd986d3d3ae6994de4c3767d5a 100644 (file)
--- a/docs-xml/smbdotconf/security/kerberosmethod.xml
+++ b/docs-xml/smbdotconf/security/kerberosmethod.xml
@@ -35,6 +35,12 @@
          <smbconfoption name="dedicated keytab file"/> must be set to
          specify the location of the keytab file.
        </para>
+
+       <para>
+       Suggested configuration is to use the default value 'secrets only' together with the
+       <smbconfoption name="sync machine password to keytab"/> option.
+       </para>
+
 </description>
 <related>dedicated keytab file</related>
 <value type="default">default</value>