From: Stefan Metzmacher <metze@samba.org>
Date: Sat, 22 Feb 2025 14:58:51 +0000 (+0100)
Subject: samba-tool/testparm: make it clear that 'client use krb5 netlogon' is experimental
X-Git-Tag: samba-4.22.0rc4~5
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=6833384a1b89f2561493269dbce8c76d03a775c8;p=thirdparty%2Fsamba.git

samba-tool/testparm: make it clear that 'client use krb5 netlogon' is experimental

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15815

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 5fc5f90dee13ab5168c22fd53b89c582f3d582e9)
---

diff --git a/python/samba/netcmd/testparm.py b/python/samba/netcmd/testparm.py
index 6fbde635a7d..cd854feee9c 100644
--- a/python/samba/netcmd/testparm.py
+++ b/python/samba/netcmd/testparm.py
@@ -191,6 +191,16 @@ class cmd_testparm(Command):
                 "'allow_sasl_without_tls_channel_bindings' "
                 "(if really needed).")
 
+        cli_krb5_netlogon = lp.get("client use krb5 netlogon")
+        if cli_krb5_netlogon not in ["no", "default"]:
+            logger.error(
+                "You have configured "
+                "'client use krb5 netlogon = %s'.\n"
+                "This is experimental in Samba %s "
+                "and should not be used in production!\n\n" %
+                (cli_krb5_netlogon, samba.version))
+            valid = False
+
         return valid
 
     def allow_access(self, deny_list, allow_list, cname, caddr):