samba - Feb 2022 - Compatibility With PaloAlto User Identification

On Wed, 2022-02-16 at 13:06 -0500, ralph strebbing
wrote:
> > Did you create the user 'fwuser' with a password ?
> Yes.
> 
> Ralph
Then the password for 'fwuser' should have gone with principal into the
keytab (provided that 'fwuser' has the required SPN).

Rowland

On Wed, Feb 16, 2022, 1:13 PM Rowland Penny via samba <samba at
lists.samba.org>
wrote:
> Then the password for 'fwuser' should have gone with principal into
the
> keytab (provided that 'fwuser' has the required SPN).
Gotcha, so that keytab should be good to use then.

Continuing on with what I'm running into, just ensuring there is no other
configuration needed on Samba:
Is there any configuration needed to ensure Kerberos v5 SSO is supported
and operating properly? Or is that mostly a client thing (e.g the firewall)
with the only requirement being that the Kerberos TGS is operating.

Regards,
Ralph