настройки что-то типа

--------- krb5.conf ----------
[logging]
    default = FILE:/var/log/krb5libs.log
    kdc = FILE:/var/log/krb5kdc.log
    admin_server = FILE:/var/log/kadmind.log

[libdefaults]
    default_realm = DOMAIN.LAN
    dns_lookup_realm = true
    dns_lookup_kdc = true
    ticket_lifetime = 24000

[realms]
    DOMAIN.LAN = {
kdc = srv-pdc.domain.lan:88
admin_server = srv-pdc.domain.lan:749
default_domain = domain.lan
    }

[domain_realm]
    .domain.lan = DOMAIN.LAN
    domain.lan = DOMAIN.LAN

------------------------------

----------- smb.conf ---------
# Samba config file created using SWAT
# from 192.168.110.31 (192.168.110.31)
# Date: 2004/05/26 19:36:34

# Global parameters
[global]
dos charset = CP866
workgroup = DOMAIN
realm = DOMAIN.LAN
server string = File Server
interfaces = 192.168.110.0/24
bind interfaces only = Yes
security = ADS
allow trusted domains = No
obey pam restrictions = Yes
max log size = 1000
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
os level = 0
preferred master = No
local master = No
domain master = No
dns proxy = No
wins server = 192.168.110.1
ldap ssl = no
idmap uid = 10000-65000
idmap gid = 10000-65000
hosts allow = 192.168.110., 127.
strict locking = No

[tmp]
path = /tmp
valid users = '@DOMAIN\Domain Admins'
read only = No
------------------------------

и все работает как часы

все это крутится на RedHat Enterprise ES v3 и samba 3.0.2-6.3E