I'm contemplating replacing NFS with Samba (to get rid of portmap and RPC).
I have a Kerberos authentication set up for while now. What would be really cool is to set up Samba to authenticate against that (which is possble with an ADS server and client).

I googled arround, but all documents are about connecting to an ADS domain, or controlling one in a Windows environment.

Does anyone have any good documentation about what I would like to do? Or has anyone actually gotten this to work?

So you already have a Samba server setup as a DC authenticating users, and you want another Samba server to authenticate against it...? Never tried it, but I don't see how the authentication would be different as the Kerberos auth should run across the same port. What happens when you try connecting your second Samba server to your existing domain...?

There is no Samba server up yet.

What I want to do is this:
I have a server with several clients, all are running Linux.

The server is already a Kerberos KDC/admin, the clients authenticate using libpam_krb5.

I would like to set up Samba on the server to share folders. The catch is that I would like the clients to authenticate using the Kerberos tickes provided by libpam_krb5 (already used by evolution to do GSSAPI auth for Imap).

Is this possible? I see many threads about linking Samba server to AD, which is basicly Kerberos with LDAP.