[Samba] Setting up ADS in Samba with MIT kerberos mapping/backend

[James Pulver]

So, I'm trying to figure out how to get Samba to work in this way. 
Specifically, I have a 2003 R2 AD in 2003 functional level. All user 
accounts are mapped to the same user account name @ our MIT Kerberos 
server. Users do not know their AD password.

Can Samba authenticate users with their Kerberos realm passwords, and 
know to use the same user name so the UIDs match for both platforms + 
permissions?

If it can, what should the smb.conf look like?
--
James Pulver
Information Technology Area Supervisor
LEPP Computer Group
Cornell University