Active Directory, winbind kerberos

[Javier Palacios]

> Also, with a kerberos ticket, if i use nautilus to browse to a windows
> share it seems to want to do NTLM first as it asks for a password, if
> i hit cancel it then appears to go and get the cifs kerberos ticket
> and browse the network share, any ideas on this one?
>
>
> Has any got any additional tricks for AD integration?

The best way to avoid NTLM authentication and ensure that you are
using kerberos is to not use winbind.

You can see a howto in
http://kad.wiki.sourceforge.net/ActiveDirectoryIntegration. It's
supposed to work, but if you find any problem, just ask. It works, but
maybe missed to document some point (or done obscurely).

Javier Palacios