CIFS and Kerberos question

[Luke Howard]

>[Question 2. Is there a chance GSSAPI on UNIX client and SSPI on Windows server interoperate, with reasonable
>amount of changes?] 

Yes.

>[Question 3. What exactly does Kerberos do in the server?  If Kerberos is used only for initial authentication,
>then all I need to do is PKINIT in the filesystem on UNIX, right?  Or, does Kerberos actually check a ticket per
>each message, and even more, encrypt the data transferred between the client and the server?  If so, what exactly
>do I have to do?  Encrypt packets with Kerberos functions?] 

By default, Kerberos is used for SMB authentication only.

-- Luke

--
Luke Howard | PADL Software Pty Ltd | www.padl.com