You might be right, but the use of "kinit" is only mentioned for testing
purposes, but not as an essential part of the implementation...
My process generates following credentials:
[EMAIL PROTECTED] root]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [EMAIL PROTECTED]
Valid starting
The purpose of "net ads join -U Administrator%password" (password is required) is not
to obtain a Kerberos ticket but to create a computer account in the AD thereby setting
up the trust required for other clients to authenticate to the Samba server with an AD
Kerberos TGT. Use kinit from any cli