[Samba] How to configure samba to use LDAP/Kerberos authentication without using winbind?

[Rowland penny]

On 22/05/16 05:01, Dewayne Geraghty wrote:
>
>
> Rowland, I'm in a similar situation.  We use virtual machines on one 
> physical host that calls upon AD (mail, squid, ...). nslcd is less 
> complex to install/maintain due to lower number of additional 
> libraries/packages required, as well as less resource impact.
>
> Name      RSS     VSZ      No of shared libs
> winbindd  46.9M   84.3M    120
> nslcd          6.8M   35.8M     19
> taken from FreeBSD 10.3
>

Whilst nslcd appears to use less libs, over 98% of the libs used by 
winbindd are also used by smbd (you are using smbd, aren't you? ), so 
you may be installing more libs than needed. As for complexity of 
install, winbindd uses smb.conf and you will have set this up anyway. To 
put it bluntly, if you use nlscd, you are installing and setting it up 
to do something that winbind will do very easily.

Rowland