On 4/20/22 11:00, van Vloten Kees via samba wrote:> Hi Team,
>
> What are the options for SSO from a (remote) Windows 10 non-domain machine
> that is connected to the network with (open)VPN?
>
> I would want users to enjoy a similar SSO experience when they connect from
> their home machine as when they are in the office. Is there any option for
> the user to get a krb5 ticket after connecting over VPN to the network, by
> running something similar to kinit?
>
> - Kees
You have to build some sort of proxy yourself.
Otherwise, they have to enter credential information and get a ticket.
There are "other ways" (passing/storing/associating credential), but
again, it's
something you'd have to build on your own.
But, maybe someone has something already "baked"?