Samba4: The mit list insist that file server and DC must be one and the same

[steve]

On 17/08/12 13:20, Gémes Géza wrote:
> 2012-08-17 11:40 keltezéssel, Stefan (metze) Metzmacher írta:
>> Am 17.08.2012 11:37, schrieb steve:
>>> On 17/08/12 11:24, Andrew Bartlett wrote:
>>>> On Fri, 2012-08-17 at 08:54 +0200, steve wrote:
>>>>> On 17/08/12 04:50, Andrew Bartlett wrote:
>>>>>> On Thu, 2012-08-16 at 10:10 +0200, steve wrote:
>>>>>>> On 15/08/12 23:18, Gémes Géza wrote:

>>>
>>> My script creates not only the user himseld but also sendible values in
>>> AD for unixHomeDirectory. I want to be able to create unixHomeDirectory.
>>> If I do that on the DC then I must mount the real home directory from
>>> the filesever otherwise I double the work for myself in having to:
>>> 1. Create the user on the DC
>>> 2. Go over to the file server and create his unixHomeDirectory
>> Can't you use:
>>
>> ssh fileserver mkdir /some/path
>> with a ssh-key without a passphrase?
>>
>> metze
>>
> Or via GSSAPI using a keytab?
>
> Geza Gemes

Hi Geza
Ah, you beat me to it. I have it working with a rsa key at both ends. 
The only time I use the ssh in the script is here:

ssh root at hh32 "mkdir /home2/$2/$1 .; chown $uid:20513 /home2/$2/$1"

How would I do the same via GSSAPI?

Cheers,
Steve