I know its says solved but I would much appreciate your input Christian.
Your musings of kerberos being a separate service rather than part of Samba made my mind tick a little.
I really want to get Kerb authentication working. I am thinking that this is not a Zentyal problem or a Kerberos one.
Its a M$ one that is being inherited by the reverse engineering that Samba4 is.
http://forum.zentyal.org/index.php/topic,18262.msg70675.html#msg70675Thats a message from the 2nd and I am still trying to get some feedback on this.
I would really appreciate your thoughts Christian because I don't think the fault lies with Zentyal or Kerb just the M$ implementation that Samba4 has copied.
http://forum.zentyal.org/index.php/topic,18568.msg72259.html#msg72259I had come to the conclusion that I would just do some windows registry hacking.
Then I remembered the kerberos principle name in Zentyal follows krb5PrincipalName=krbtgt/THURSBYGARDEN.LAN@THURSBYGARDEN.LAN,ou=Kerberos,dc=thursbygarden,dc=lan
If kerberos is case sensitive its not good form to start having various forms of case?
I think you might be able to help but how do I manage to edit the LDAP's so all the principle names follow M$ rules.
Thats the only thing I can think of doing as Samba4 is a replication of M$ AD so when in rome...