if you have completely disabled NTLM and you want to a mount a cifs share by an DNS alias you have to set an Service Principal Name for the alias at the computerobject.
Continue reading Windows: Enable Share access for alias/cname or IP address with kerberos
Advertisment to support michlstechblog.info
unfortunately Microsoft has deceided to discontinue its Small Buisiness Server and for small environments you not really want to buy an Windows Server and install them as an Active Directory Domain Controller. When Microsofts Cloud isn’t also an option then you can use Samba :-).
Continue reading Samba: Setup an Active Directory
in some secure environments only kerberos authentication is allowed to connect to a Windows file share.
This example demonstrate the procedure on how to mount a share on a Debian 7 (Wheezy) Linux. Other distributions should provide a simliar way.
First of all install the necessary pakets.
michael@debdev:~# apt-get install krb5-user krb5-config cifs-utils keyutils
After installing the packages the Kerberos configuration wizard starts.
Continue reading Linux: Mount a Windows share with kerberos authentication