Hello, Besides samba, you could have a look to pGina. You have for sure ldap authentication + authorization, but I don't remember a mixed kerberos-ldap (I search that about two years ago)
There is also a Windows SSP that allowed you to do what you want, and a couple of things you maybe are only thinking on, as create authorized accounts on the fly. I'm not aware of improvements (again since two years), but I did the work more or less nicely (needed to patch to not remove local accounts if something fails). It is at http://sc-ap.sourceforge.net/ I cannot tell you if any of these allow any kind of roaming profile, in case you need it. Javier Palacios ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
