On Fri, 22 Jun 2018, Jonathan Billings wrote: > On Fri, Jun 22, 2018 at 03:43:56PM +0200, Toralf Lund wrote: >> Well, I'm not. Or the CentOS machine is not configured for it, anyway. Might >> be possible to do, but I'm not entirely sure it would be worth the effort. > > All you'd need is to use AD's kerberos realm for authentication and > have a username that matches the AD name. You need more than that to do it securely, as you need a keytab. > (And honestly, if you are someplace with AD you probably should be > using at least the kerberos component, and possibly binding to the > domain so you can use it's account managemnt too. You just need > patient AD admins.) As long a s you have rights to add machines to the domain, you shouldn't need to bother the admins at all, unless you need to modify delegation permissions, which only really affect windows clients anyway. jh