[Samba] mod_ntlm_winbind / Apache2

[Kevin Shanahan]

On Sat, 2006-09-02 at 09:49 +1000, Andrew Bartlett wrote:
> Because it needs to access either the secrets.tdb or a keytab,
> gss-spnego is much more fragile than the NTLMSSP helper.  We could make
> it less fragile by handling the kerberos verification in winbindd,
> rather than in the ntlm_auth binary.

I'm not 100% sure of what you just said (my knowledge of kerberos stuff
is very limited). My samba setup on this host is running as a member
server in a Win2000 AD environment. Are you saying that I need to do
some more kerberos setup outside of samba/winbind to get the gss-spnego
helper to work?

Thanks,
Kevin.