Samba / AD / MIT-KDC

[Matt Joyce]

I replied to Mark in private suggesting he look at coda or openafs in 
place of a samba link to the AD boxes, simply because of the increased 
functionality, and the lack of a need for a ldap bridge to ad from 
samba.   I was wondering if anyone had any preferences concerning coda 
and openafs in an environment like his, or any pitfalls they were aware 
of.  I am curious as to what others have experiences.

I guess this is an RFI of sorts...

-Matt Joyce

Mark Hendricks wrote:

>We have Linux Servers (Red Hat) bound to a Windows 2003 AD.
>
>We are using a cross realm trust (two way transitive trust) and AD account mappings to allow Windows clients to authenticate against an MIT KDC.  I know that Samba uses ADS in its configuration to attach as a member server to an Active Directory, but how is samba configured to be a member server in the Windows AD, but use an external MIT KDC.
>
>I have seen many times that it should be possible.... does anyone know how?
>
>Thanks
>
>Mark
>________________________________________________
>Kerberos mailing list           Kerberos at mit.edu
>https://mailman.mit.edu/mailman/listinfo/kerberos
>  
>