WINBIND_KRB5_LOCALAU(8)

✨ NAME ✨

winbind_krb5_localauth — a plugin for MIT Kerberos for mapping user accounts 💅

---

🌸 DESCRIPTION 🌸

okay so bestie, this plugin is part of the samba(7) suite. she's one of the family 🫶

winbind_krb5_localauth is a plugin that lets the MIT Kerberos libraries know that Kerberos principals can be validated against local user accounts. like, the principal shows up and local accounts get to do the vibe check ✨

---

🎀 PREREQUISITES 🎀

Before you go anywhere, you need MIT Kerberos — at least version 1.12. no cap, that's the floor. 🙈

The plugin also queries the winbindd(8) daemon, which needs to be configured and started separately. she does not start herself, she is not that kind of girl 💀

And the following sections need to be added to the krb5.conf file:

[plugins]
     localauth = {
          module = winbind:/usr/lib64/samba/krb5/winbind_krb5_localauth.so
          enable_only = winbind
     }

copy that block exactly, bestie, don't freestyle the paths 👑

---

⭐ VERSION ⭐

This man page is part of version 4.24.7 of the Samba suite. periodt. 💖

---

👑 AUTHOR 👑

The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed. iconic behavior honestly 🌈

The winbind_krb5_localauth manpage was written by Andreas Schneider. 🦋

---

mwah — that's the whole page, and yes she's from Samba 4.24.7, dated 09/09/2026, and this manual is WINBIND_KRB5_LOCALAU(8) 💜 stay hydrated and keep your krb5.conf cute 🍓