Built Samba 4.23 from ports, selecting MIT Kerberos. Used samba-tool to configure it
samba-tool domain provision --use-rfc2307 --realm=SAMBA.EXAMPLE.COM --domain=SAMBA --server-role=dc --dns-backend=SAMBA_INTERNAL --option="interfaces = 172.16.15.77, 172.20.12.41" --option="bind interfaces only = yes" --option="idmap_ldb:use rfc2307 = yes" --option="server services = -nbt" --adminpass="MySuperSecurePassworl"
service samba_server start
Performing sanity check on Samba configuration: OK
Starting samba.
log.samba contains:
[2026/07/07 12:16:34.216107, 0] ../../source4/samba/server.c:636(binary_smbd_main)
samba version 4.23.8 started.
Copyright Andrew Tridgell and the Samba Team 1992-2025
mitkdc: /usr/local/sbin/krb5kdc: Stash file (null) uses DEPRECATED enctype !
mitkdc: Interrupted system call mitkdc_server_done: The MIT KDC daemon died with exit status 1
mitkdc: Interrupted system call task_server_terminate: task_server_terminate: [mitkdc child process exited]
[2026/07/07 12:16:34.518956, 0] ../../source4/samba/server.c:404(samba_terminate)
samba_terminate: samba_terminate of samba 12556: mitkdc child process exited
mit-kdc.log contains:
Jul 07 12:16:34 samba krb5kdc[20163](info): Loaded
Jul 07 12:16:34 samba krb5kdc[20163](Error): preauth pkinit failed to initialize: PKINIT initialization fai
led: No pkinit_identity supplied for realm SAMBA.EXAMPLE.COM
Jul 07 12:16:34 samba krb5kdc[20163](Error): preauth spake failed to initialize: No SPAKE preauth groups co
nfigured
Jul 07 12:16:34 samba krb5kdc[20163](info): setting up network...
Jul 07 12:16:34 samba krb5kdc[20163](info): setsockopt(14,IPV6_V6ONLY,1) worked
Jul 07 12:16:34 samba krb5kdc[20163](Error): Can't assign requested address - Cannot bind server socket on
[::]:88
Jul 07 12:16:34 samba krb5kdc[20163](Error): Failed setting up a UDP socket (for :
Jul 07 12:16:34 samba krb5kdc[20163](Error): Can't assign requested address - Error setting up network
mit_kdc.log
samba-tool domain provision --use-rfc2307 --realm=SAMBA.EXAMPLE.COM --domain=SAMBA --server-role=dc --dns-backend=SAMBA_INTERNAL --option="interfaces = 172.16.15.77, 172.20.12.41" --option="bind interfaces only = yes" --option="idmap_ldb:use rfc2307 = yes" --option="server services = -nbt" --adminpass="MySuperSecurePassworl"
service samba_server start
Performing sanity check on Samba configuration: OK
Starting samba.
log.samba contains:
[2026/07/07 12:16:34.216107, 0] ../../source4/samba/server.c:636(binary_smbd_main)
samba version 4.23.8 started.
Copyright Andrew Tridgell and the Samba Team 1992-2025
mitkdc: /usr/local/sbin/krb5kdc: Stash file (null) uses DEPRECATED enctype !
mitkdc: Interrupted system call mitkdc_server_done: The MIT KDC daemon died with exit status 1
mitkdc: Interrupted system call task_server_terminate: task_server_terminate: [mitkdc child process exited]
[2026/07/07 12:16:34.518956, 0] ../../source4/samba/server.c:404(samba_terminate)
samba_terminate: samba_terminate of samba 12556: mitkdc child process exited
mit-kdc.log contains:
Jul 07 12:16:34 samba krb5kdc[20163](info): Loaded
Jul 07 12:16:34 samba krb5kdc[20163](Error): preauth pkinit failed to initialize: PKINIT initialization fai
led: No pkinit_identity supplied for realm SAMBA.EXAMPLE.COM
Jul 07 12:16:34 samba krb5kdc[20163](Error): preauth spake failed to initialize: No SPAKE preauth groups co
nfigured
Jul 07 12:16:34 samba krb5kdc[20163](info): setting up network...
Jul 07 12:16:34 samba krb5kdc[20163](info): setsockopt(14,IPV6_V6ONLY,1) worked
Jul 07 12:16:34 samba krb5kdc[20163](Error): Can't assign requested address - Cannot bind server socket on
[::]:88
Jul 07 12:16:34 samba krb5kdc[20163](Error): Failed setting up a UDP socket (for :
Jul 07 12:16:34 samba krb5kdc[20163](Error): Can't assign requested address - Error setting up network
mit_kdc.log