On Tue, May 02, 2017 at 10:12:35AM +0100, Rowland Penny wrote: > > Samba is moving to MIT kerberos instead of Heimdal. Unless the version of MIT > is raised to 1.15.1, it will become impossible to create an AD DC on Debian > when Samba 5.0.0 is released and that may be sooner than you think. > All the major work to use MIT has been done, so the next Samba release is > likely to be version 5.0.0
We expect to have krb5 1.15.1 in sid shortly after stretch releases; it did not seem worth taking immediately upon the krb5 release given the potential for headaches if updates are needed for stretch prior to stretch's release. -Ben