Solaris Kerberos clients against MS Active Directory KDC
Configuring Solaris as a Kerberos client to work against a MS Active Directory Domain is documented by Oracle in the How to Configure a Kerberos Client for an Active Directory Server. This uses the /usr/sbin/kclient script provided by the kerberos-5 package, but makes some assumptions: The computer object will be created in OU=Computers The user joining the client to the domain must have Domain Administrator rights The first issue is fairly trivial to work around, but the second is more interesting and that is what the rest of this post will focus on....