docs-xml: add 'kdc enable fast' option

This will be useful to test against a KDC without FAST support
and find/prevent regressions.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15002
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15005

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>

diff --git a/docs-xml/smbdotconf/security/kdcenablefast.xml b/docs-xml/smbdotconf/security/kdcenablefast.xml
new file mode 100644 (file)
index 0000000..e47ca3b
--- /dev/null
+++ b/docs-xml/smbdotconf/security/kdcenablefast.xml
@@ -0,0 +1,15 @@
+<samba:parameter name="kdc enable fast"
+                 type="boolean"
+                 context="G"
+                 xmlns:samba="http://www.samba.org/samba/DTD/samba-doc">
+<description>
+       <para>With the Samba 4.16 the embedded Heimdal KDC brings
+       support for RFC6113 FAST, which wasn't available in
+       older Samba versions.</para>
+
+       <para>This option is mostly for testing and currently only applies
+       if the embedded Heimdal KDC is used.</para>
+</description>
+
+<value type="default">yes</value>
+</samba:parameter>

diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c
index cae763b44ea4e8c90826fb47bda2528004d6c5d6..d6d845391e6f3bb53d2f940059887c6806fdcbf0 100644 (file)
--- a/lib/param/loadparm.c
+++ b/lib/param/loadparm.c
@@ -2695,6 +2695,8 @@ struct loadparm_context *loadparm_init(TALLOC_CTX *mem_ctx)
        lpcfg_do_global_parameter(lp_ctx, "krb5 port", "88");
        lpcfg_do_global_parameter(lp_ctx, "kpasswd port", "464");
 
+       lpcfg_do_global_parameter(lp_ctx, "kdc enable fast", "True");
+
        lpcfg_do_global_parameter(lp_ctx, "nt status support", "True");
 
        lpcfg_do_global_parameter(lp_ctx, "max wins ttl", "518400"); /* 6 days */

diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c
index 96b72c2dfe0654f50d9adfd12b54beab1364edaf..630937e521d407b21523dbd479b535434265fd87 100644 (file)
--- a/source3/param/loadparm.c
+++ b/source3/param/loadparm.c
@@ -942,6 +942,8 @@ static void init_globals(struct loadparm_context *lp_ctx, bool reinit_globals)
 
        Globals.kpasswd_port = 464;
 
+       Globals.kdc_enable_fast = true;
+
        Globals.aio_max_threads = 100;
 
        lpcfg_string_set(Globals.ctx,