samba - Apr 2017 - Samba authentication using non-AD Kerberos?

Hi!

Do you know any example Samba configuration that authenticate to 
plain - non-AD, e.g. MIT KDC - Kerberos server? Would you mind 
point me to that configuration? What will be the issue of this 
kind of configuration?

Thank you.

-- 
    ____  ____  ____  ____ (stephan paul) Arif Sahari Wibowo
   /___  /___/ /___/ /___      http://www.arifsaha.com/
  ____/ /     /   / ____/

On Wed, 2017-04-12 at 19:17 -0600, S P Arif Sahari Wibowo via samba
wrote:
> Hi!
> 
> Do you know any example Samba configuration that authenticate to 
> plain - non-AD, e.g. MIT KDC - Kerberos server? 
This a normal and fully supported configuration.  It maps to normal
unix users. 
> Would you mind 
> point me to that configuration? What will be the issue of this 
> kind of configuration?
>From memory:
security=user

use kerberos keytab = system keytab

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

On 2017-04-13, 01:58, Andrew Bartlett via samba wrote:
> On Wed, 2017-04-12 at 19:17 -0600, S P Arif Sahari Wibowo via 
> samba wrote:
>> Do you know any example Samba configuration that authenticate 
>> to plain - non-AD, e.g. MIT KDC - Kerberos server?
>
> This a normal and fully supported configuration.  It maps to 
> normal unix users.
Thanks! is it mean that the OS (Linux) have to setup for login 
using Kerberos as well?

I was looking into samba wiki pages and cannot find 
documentation for this. Generally most the documentation pages 
either discussing samba as AD member or standalone.
> From memory:
>
> security=user
>
> use kerberos keytab = system keytab
Thanks! Obviously there is no "net ads join" command, so 
anything to be done instead of that?

Thank you.

-- 
    ____  ____  ____  ____ (stephan paul) Arif Sahari Wibowo
   /___  /___/ /___/ /___      http://www.arifsaha.com/
  ____/ /     /   / ____/