Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a network with mostly Linux servers and clients, which we recently moved from NIS to Kerberos & LDAP. One of the main reasons was to secure our NFS shares using Kerberos. This is all working great.

Now we do have a few windows clients and we would like to make the NFS shares available to them in a more comfortable way than using WinSCP.

As far as I can see NFSv4 is not available for Windows, let alone with support for Kerberos.

That leaves Samba. The problem is that Samba needs Kerberos credentials to access the NFS shares. They would somehow have to come from Windows. The MIT Kerberos client for Windows works fine. But I don't know if it's possible for Samba to use the credentials from the client or maybe also just take the password and use that to authenticate against the KDC. If it can be done, how?

share|improve this question

It should be able to - have a look at

share|improve this answer
Thanks, this got me one step further. I can now authenticate against Kerberos using smbclient from a Linux machine. The main problem remains however. Samba has to use kerberos credentials to access the user's data but it doesn't. It just changes the uid and tries to access the files, which does not work, because of the kerberized NFS4 mounts. – Mika Fischer Feb 3 '10 at 22:38

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.