Zusammenhang zwischen SAMBA, WINBIND, KERBEROS, PAM, ntlm auth und Active Directory

[global]
        workgroup = IAS 
        netbios name = TESTSRV
        realm = IAS.DE 
        idmap uid = 10000-59999
        idmap gid = 10000-59901
     # winbind separator = /
        winbind use default domain = Yes
        security = ADS
        encrypt passwords = true
        password server = *
        log level = 1
        idmap backend = ad
        template shell = /bin/bash
        client use spnego = yes

  
**Konfiguration krb5.conf**

[libdefaults]
        default_realm = IAS.DE
	default_tkt_enctypes = aes128-cts des3-cbc-sha1 rc4-hmac des-cbc-md5 des-cbc-crc
	default_tgs_enctypes = aes128-cts des3-cbc-sha1 rc4-hmac des-cbc-md5 des-cbc-crc
	permitted_enctypes = aes128-cts des3-cbc-sha1 rc4-hmac des-cbc-md5 des-cbc-crc
        clockskew = 300

[domain_realm]
        .ias.de = IAS.DE

[logging]
#      default = SYSLOG:NOTICE:DAEMON
        default = FILE:/var/log/krb5libs.log
        kdc = FILE:/var/log/kdc.log
        kadmind = FILE:/var/log/kadmind.log

[appdefaults]
        pam = {
                ticket_lifetime = 1d
                renew_lifetime = 1d
                forwardable = true
                proxiable = false
                retain_after_close = false
                minimum_uid = 0
                debug = false
        }

net join -I <IP-des-Domaincontrollers> -U <Domänenadministrator>