> Im not a complete expert in this area, but. If you try winbind its got to > have a correctly configured kerberos client to contact the AD. Could you try > this but specify your MIT Kerberos kdc instead. Samba cannot currently acquire Kerberos tickets on behalf of the client