[Samba] Samba 4 AD share: Access denied

[steve]

On Tue, 2014-07-29 at 09:01 -0400, Ryan Ashley wrote:

> Before I change anything, I would like to know what that keytab file 
> does.

In kerberos, not only does the user have to authenticate, but also the
machine upon which the user is working on or the machine which is
offering the cifs service in the domain. The host/ and machine keys in
the keytab must match their originals in the KDC. samba can
automatically produce the correct keytab for you when you join the
domain.
HTH,
Steve