Hi,
if you have completely disabled NTLM and you want to a mount a cifs share by an DNS alias you have to set an Service Principal Name for the alias at the computerobject.
Continue reading Windows: Enable Share access for alias/cname or IP address with kerberos