[Samba] Compatibility With PaloAlto User Identification

[ralph strebbing]

On Wed, Feb 16, 2022, 1:13 PM Rowland Penny via samba <samba at lists.samba.org>
wrote:

> Then the password for 'fwuser' should have gone with principal into the
> keytab (provided that 'fwuser' has the required SPN).

Gotcha, so that keytab should be good to use then.

Continuing on with what I'm running into, just ensuring there is no other
configuration needed on Samba:
Is there any configuration needed to ensure Kerberos v5 SSO is supported
and operating properly? Or is that mostly a client thing (e.g the firewall)
with the only requirement being that the Kerberos TGS is operating.

Regards,
Ralph