Has anyone been able to get samba working on Centos 6 using LDAP to an MSSFU3.5 enabled active directory?

I've had it working perfectly on centos 5.x but centos 6 implements a new nss concept, being nslcd.

I am able to authenticate via pam for ssh and local logins, getent passwd and group works, its only samba auth that fails.

The logs are complaining about an unknown encryption type for kerberos, though kinit works swimmingly. Is it possible that samba implements different supported kerberos encryption under centos 6, or that the krb5-workstation package is limiting it somehow?

I don't want to use winbind as i enjoy setting authorisation and user attributes via AD, specifically UIDs, homedirs and shells. I've read something about winbind using nss for user attributes so this might be my next step if i cant get it working.

I'm not sure if it's upgrades to LDAP or samba that have broken this. For LDAP, they have a few sparse notes at http://docs.redhat.com/docs/en-US/Re...e/ch07s03.html


(I just happen to know about that one as it affected a friend of mine--my experience is that finding what changes RH made that break things is often a difficult search, but that could be my failings or simply bad luck.)