Getting Samba to play with OpenLDAP/Kerberos

[Braden McDaniel]

I have an existing OpenLDAP/Kerberos setup that I'm trying to get Samba
to play with.

I have no trouble signing on via Kerberos.  However, when testing with
smbclient:

$ smbclient -k -L //rail/
        session setup failed: NT_STATUS_LOGON_FAILURE

In smb.conf I have:

[global]
        security = ADS
        realm = ENDOFRAME.NET
        kerberos method = secrets and system keytab
        encrypt passwords = yes

I added the keytab as follows:

kadmin: ktadd -e rc4-hmac:normal cifs/rail.endoframe.net

Any suggestions?