[Samba] Privilege Attribute Certificate (PAC) Disabled/Samba authentication

[Don Riden]

Hi Andrew,

>Why not run NFS on a different principal?  (eg add a new server-nfs
>principal and set a servicePrincpalName: nfs/server)

Thanks.

Creating a new machine account in AD for nfs was my fallback option if I couldn't make it work. I'll go ahead with that (unless there is an easier way to achieve the same end in AD).

Cheers

Don