Specifies whether Samba should attempt to maintain service principals in the systems keytab file for host/FQDN and cifs/FQDN. When you are using the heimdal Kerberos libraries, you must also specify the following in /etc/krb5.conf: [libdefaults] default_keytab_name = FILE:/etc/krb5.keytab False