On Tue, 12 Apr 2011, Alain Péan wrote: > Indeed, nothing fails now. I want my users to authenticate against > Active directory, and it works, and I would like them to be able to use > their kerberos credentials, if they need, to access domain ressources, > as shares. But I have still to see a problem there.. > > Thanks again for your help and your comments ! So is it all working after taking out the ldap auth? With it in you'll not be generating kerberos tickets if there's anything wrong with your kerberos setup. jh