This is the full pathname to a script that will be run by winbindd 8 when a machine account password is updated. If keytabs should be generated in clustered environments it is recommended to update them on all nodes. You can set the config option to &pathconfig.CTDB_DATADIR;/scripts/winbind_ctdb_updatekeytab.sh in clustering case. It is also needed to activate the 46.update-keytabs.script in ctdb, it re-creates the keytab during the ctdb recovered event: onnode all ctdb event script enable legacy 46.update-keytabs.script &pathconfig.CTDB_DATADIR;/scripts/winbind_ctdb_updatekeytab.sh