On 22/01/2021 20:23, Dorian Taylor (Lists) wrote: > Perhaps the question I should have asked is “how closely-coupled is using Kerberos to authenticate to a Samba share to the whole AD ball of wax?“, but it looks like the answer is “It’s all or nothing, baby.” > You could consider a Unix domain member instead. Rowland