On Thu, Jan 24, 2013 at 01:36:04PM -0800, Eric Chennells wrote:
> [windows kerberos client]
> Is anyone aware of if there is an LDAP related configuration needed? It
> seems like only setting up the kerberos authentication is not enough.
The only working way with unmodified  Windows as client is for Windows
to use Kerberos from IPA for authentication. Instead of LDAP the
user data has to be created locally. So you bevore doing the Ker-
beros configuration you have to be able to log into the account. After
the Kerb. configuration you can authenticate with the IPA password.
 So no pgina etc. used, just native Windows
Freeipa-users mailing list