No subject

web site about it, I have concluded that the way to make this work
is to configure Samba as a Windows 2000 domain controller which has
a "trust relationship" with the KDC.

However, looks like this doesn't currently work with Samba.

Now, I imagine that Samba is not particularly interested in implementing
a KDC inside Samba (the Windows 2000 DC is a KDC, right?), which is why
Windows 2000 clients have to talk to a Samba DC in "legacy mode" (please
correct me if my understanding of this is wrong :-)

Am I confused?  Is there currently a way to use Samba *and* my KDC
at the same time?  If not, what is the current strategy/status of
Samba and Kerberos?

-- 
        -- Jason R. Thorpe <thorpej at zembu.com>