title: How to use Kerberos for samba authentication
body: <p>I have WS 2016 running as AD/DC on which NTLM/NTLMv2 is disabled (Kerberos is a way to go). I have successfully joined Ubuntu machine to it, using this tutorial &quot;<a href="https://docs.vmware.com/en/VMware-Horizon-7/7.13/linux-desktops-setup/GUID-F8F0CFCF-C4D6-4784-85FF-E7C6DF575F49.html" rel="nofollow noreferrer">Integrate Ubuntu with AD</a>&quot;. Everything if working correctly (except Samba), can view users and groups on AD and can login to Ubuntu machine using AD user.</p>
  <p>Now when I try to login with AD user to samba share I get NT_STATUS_NTLM_BLOCKED, which is expected, sense NTLM is blocked by AD.</p>
  <p>Now my question is how to setup (force) Samba to use kerberos instead NTLM ?</p>