[Samba] Kerberos and Samba

[Andrew Bartlett]

On Mon, Apr 12, 2004 at 11:45:40AM +0200, Tarjei Huse wrote:
> So doing it this way means that you do not need to modify samba in any
> way?
> 
> Cool!

Correct.  There are a few gotchas - most of them should be solved with
the smbk5pwd contributed slapd plugin available from OpenLDAP CVS
HEAD.  I was consulted on the building of this plugin, but have not
yet tested it.

(When using the plugin, you need to set 'ldap password sync = only',
and don't use password expirty for the timebeing).

Andrew Bartlett